Your career information deserves care.
This notice explains the information CVPilot AI processes to provide the resume and career workspace. The site operator must complete the business identity, jurisdiction, processor list and retention schedule before public launch.
Who operates CVPilot AI
Service name: RESUME UAI. The legal entity or individual operating the service, its business address and its applicable jurisdiction must be published here by the site owner. Privacy requests: mpadagannavar@gmail.com
Information we process
- Account information: name, email address, password hash, email-verification state and account timestamps.
- Career content: resumes, imported documents, master career profile, work history, education, skills, projects, cover letters, job descriptions, application kits, interview preparation and job-tracker notes.
- ATS analysis history: if a signed-in user saves an analysis, CVPilot stores a snapshot of the submitted resume text, job description, optional company/role details and the generated score breakdown. The latest 100 saved reports are retained per account unless the user deletes them earlier.
- Service and security records: session/security version, usage events, login throttling data, reset/verification token hashes, webhook records and diagnostic logs.
- Payment records: plan, order reference, amount, currency, payment provider, provider transaction identifiers, subscription period and payment status. Card and wallet credentials are entered on the provider's hosted checkout, not in CVPilot forms.
How information is used
We use account and career information to provide resume editing, AI-assisted drafting, job-specific tailoring, ATS-style estimates, document storage, PDF operations, application tracking, account security, customer support, billing and service improvement. We do not promise that an employer will select a candidate or that a resume will pass a particular applicant-tracking system.
AI and other service providers
When AI features are used, relevant text and documents supplied for that request are sent to the AI provider configured by the operator. Payment information is processed by the payment provider selected at checkout. Email addresses and message content may be handled by the configured email delivery provider. Hosting, database, backup, monitoring and security providers may process information to operate the service. The operator must identify the actual providers, their locations, contractual terms and any applicable data-transfer safeguards here.
Uploads, generated documents and retention
Resume and career content is stored in the account workspace until the user deletes it or the account is deleted. PDF operations use temporary upload/output storage outside the public web root; completed downloads are removed after delivery and a cleanup task is provided for abandoned temporary files. The operator must configure and disclose concrete retention periods for logs, backups, support records and legally required billing records. The current account-deletion flow removes user-linked workspace and payment-order records; add any legally required financial-record retention/anonymization process before launch.
Cookies and browser storage
CVPilot uses a session cookie for authentication and request security. The site also stores a light/dark appearance preference in browser storage. Do not add analytics or advertising cookies without updating this notice and obtaining any consent required by applicable law.
Security
The application includes password hashing, CSRF checks, session rotation/revocation, rate limiting, private file storage, encrypted-at-rest provider credentials and server-side payment verification. No online service can guarantee absolute security. The operator remains responsible for HTTPS, backups, host access, patching, access reviews and incident response.
Your choices and rights
Depending on applicable law, users may have rights to access, correct, export, delete, restrict or object to certain processing. Users can update account information, export available workspace data and request account deletion through account settings. Contact the operator using the privacy address above for requests not supported in the interface. The operator must publish the relevant regulator/complaint route where required.
Children and changes
CVPilot is designed for people seeking education or employment opportunities and is not intended for children below the minimum age permitted by applicable law. The operator should set an age policy suitable for its market. This notice may be updated as the service changes; the effective date and material changes should be recorded here.
Effective date: Set and publish the date this completed notice becomes effective.