Legal
Privacy Policy
Last updated: 7 May 2026
1. What we collect
We collect the information you give us directly when you create an account or build a CV. That includes your name, email address, hashed password, and the CV content you choose to type in or upload (work history, education, contact details, profile photo). When you make a payment, our payment processor (Paystack) handles your card details — we never see or store them.
2. How we use your data
We use your information to:
- Save your CVs so you can come back and edit them
- Generate the PDF and Word files you download
- Process payments and unlock entitlements
- Send transactional emails (password resets, receipts)
- Respond to support requests
We do not sell your data. We do not share it with advertisers. We do not train AI models on your CV content.
3. AI features
When you use AI suggestions or import a CV, your text is sent to our AI provider for processing. The provider does not retain your content for training and does not share it with anyone. We send only what is needed to generate the suggestion or parse the import — nothing else.
4. Where your data lives
CV data is stored in encrypted Postgres databases hosted by Neon. Profile photos and uploaded files live in Vercel Blob storage. All transit between your browser and our servers happens over HTTPS.
5. Cookies
We use a single, essential cookie to keep you signed in. We do not use tracking cookies, advertising cookies, or third-party analytics that follow you across the web. We do collect anonymous, aggregated usage data to understand which features people use most.
6. Your rights
You can, at any time:
- View, edit, or delete any CV from your dashboard
- Update your profile from your account page
- Cancel your subscription at any time
- Email privacy@cvora.app to delete your entire account and every piece of data we hold about you
7. How long we keep data
Your CVs and account information stay on our servers until you delete them or close your account. After account closure, we delete everything within 30 days, except what we are required to keep for tax or legal reasons (such as payment receipts).
8. Children
Cvora is not intended for use by anyone under 16. We do not knowingly collect personal information from children. If we discover we have, we will delete it.
9. Changes
If we make material changes to this policy, we will email registered users and post a notice on this page at least 30 days before the changes take effect.
10. Contact
Questions about your privacy? Email privacy@cvora.app. We reply within one business day.