Privacy Policy

Account information. When you register, we collect your email address and password (stored securely via Clerk authentication). If you sign in with Google, we receive your name and email from Google.

CV data. The personal details, work experience, education, skills, and other content you enter in the CV builder are stored so you can access and edit them across sessions.

Uploaded files. When you use the Import CV feature, the file you upload (PDF or DOCX) is sent to our server to extract text. We do not store the original file — only the extracted text is passed to our AI parser and then discarded after the response is returned to you.

Usage data. If you accept optional analytics cookies, we collect basic technical information such as your browser type, device type, and pages visited to help us understand how the product is used and improve it. We do not build advertising profiles from this data and we do not send CV content, uploaded CV text, or personal profile details to analytics tools.

Payment information. If you subscribe to CVheaven Pro, payment and subscription details are handled by Lemon Squeezy. We do not store your payment card details.

• To provide and operate the CV builder service
• To save your CV and let you access it from any device
• To process uploaded CVs through our AI parser and return structured data to you
• To send transactional emails (e.g. email confirmation, password reset)
• To improve the product based on usage patterns (only if you have accepted optional analytics cookies)
• To process Pro subscription payments through Lemon Squeezy

We do not use your CV content for advertising, profiling, or any purpose beyond providing the service to you.

When you import a CV file, the text extracted from your file is sent to Anthropic's API (Claude) to parse it into structured fields. This text is used solely for the purpose of returning structured data to you in that session. We do not store the raw file on our servers. Anthropic's data handling is governed by their privacy policy.

CVheaven relies on the following third-party services to operate:

• Supabase — database and data storage (CV data, usage records)
• Clerk — user authentication and account management
• Vercel — hosting and deployment
• Anthropic (Claude) — AI parsing of imported CV files and AI writing assistance
• Google OAuth — optional sign-in via Google account
• Lemon Squeezy — payment and subscription processing for CVheaven Pro

The following services are loaded only if you accept optional analytics cookies:

• Google Analytics 4 (GA4) — collects page view and interaction data to help us understand how the product is used. Data is processed by Google. See Google's privacy policy for details.
• Yandex Metrica — collects usage data (session recording is disabled). Data is processed by Yandex. See Yandex's privacy policy for details.

If you accept optional analytics cookies, we may send usage and interaction data, such as pages visited and product actions taken, to our analytics providers. We do not intentionally send your CV content, uploaded CV text, email address or personal profile details through analytics events.

Each third-party service has its own privacy policy and data handling practices.

Strictly necessary cookies are used for authentication and keeping you signed in. These are set by Clerk and are required for the service to function. They do not require consent.

Optional analytics cookies are set by Google Analytics 4 and Yandex Metrica only if you accept analytics through the cookie preferences control on this site. If you reject analytics or have not yet made a choice, these cookies are not set and those scripts are not loaded.

You can change your analytics cookie preference at any time using the Cookie preferences control in the footer of this site. If you reject analytics after having previously accepted, the page will reload so that analytics scripts are no longer active. Analytics cookies previously set by these services may remain in your browser until they expire or are cleared through your browser settings — we do not programmatically remove them.

Your account and CV data are retained for as long as you have an active account. You can delete your CV data at any time from within the app. To permanently delete your account and all associated data, contact us at the email below and we will process the request promptly.

We use industry-standard practices to protect your data, including encrypted connections (HTTPS), secure credential storage via Clerk, and access controls. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

CVheaven is intended for users who are at least 16 years old. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us.

We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of the service after changes are posted means you accept the updated policy.

If you have any questions about this Privacy Policy, please reach out:

Email: support@cvheaven.com