Privacy Policy

How we protect and handle your personal information

WE NEVER SELL YOUR DATA

Period. Full stop. We do not and will never sell your personal information or CV data to third parties. Your privacy is our priority.

Last Updated: March 1, 2026
GDPR & CCPA Compliant - Your data stays yours

1. Introduction

aicvai ("we," "our," or "us") respects your privacy and is committed to protecting it through this Privacy Policy. This policy describes the types of information we may collect from you or that you may provide when you visit our website and our practices for collecting, using, maintaining, protecting, and disclosing that information.

2. Information We Collect

2.1 Personal Information

We collect information that you voluntarily provide to us when you:

  • Register for an account (name, email address, password)
  • Create or upload a CV (professional information, work history, education, skills)
  • Purchase tokens (payment information processed securely by PayPal - we do not store credit card details)
  • Contact us for support (email, name, inquiry details)

2.2 CV Content

When you upload or create a CV, we store the content to provide our services. This includes personal information you choose to include such as work history, education, skills, and contact details.

2.3 Automatically Collected Information

When you access our Platform, we automatically collect certain information, including:

  • Usage data (pages visited, time spent, features used)
  • Device information (IP address, browser type, operating system)
  • Cookies and similar technologies (see Section 7)

Data Collection Summary

Data Type Purpose Retention
Account Information Authentication, communication Until account deletion
CV Content Service provision, AI processing Until account deletion
Payment Information Transaction processing Processed by PayPal, not stored by us
Usage Data Analytics, improvement 12 months

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our services
  • Process AI analysis and CV generation
  • Manage your account and wallet
  • Process token purchases
  • Respond to your requests and support needs
  • Improve our platform and user experience
  • Send important account notifications (not marketing)

4. Data Sharing and Disclosure

WE DO NOT SELL YOUR DATA

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Ever.

We may share information only in the following limited circumstances:

4.1 Service Providers

We use trusted third-party services to operate our platform:

  • Google Gemini AI: Processes CV text for analysis and generation. Data is sent securely via API and not used for training by Google.
  • PayPal: Handles all payment processing. We never see or store your payment details.
  • Hosting Provider: Stores data securely on servers.

4.2 Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., court order, subpoena).

4.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Encryption of data in transit (SSL/TLS)
  • Hashed passwords using bcrypt
  • Regular security updates
  • Access controls and authentication
  • PDO prepared statements to prevent SQL injection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your account information at any time through your profile settings.

6.2 Data Deletion

You can delete your account and all associated data through your settings or by contacting us. Upon deletion, your CVs and personal information will be permanently removed.

6.3 GDPR Rights (European Users)

If you are in the European Economic Area (EEA), you have additional rights:

  • Right to access your data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

To exercise these rights, contact us at privacy@aicvai.

6.4 CCPA Rights (California Users)

California residents have the right to:

  • Know what personal information is collected, used, and shared
  • Request deletion of personal information
  • Opt-out of the sale of personal information (WE DO NOT SELL DATA, so no opt-out needed)
  • Non-discrimination for exercising these rights

7. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Platform and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

We use the following types of cookies:

  • Essential cookies: Required for authentication and platform functionality
  • Preference cookies: Remember your settings and preferences
  • Analytics cookies: Help us understand how users interact with our Platform

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some parts of our Platform may not function properly.

8. Third-Party Links

Our Platform may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

9. Children's Privacy

Our Platform is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child without verification of parental consent, we take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Verified: We Never Sell Your Data