Privacy Policy

1. Who we are

This policy covers CVAura("we", "us"), operating cvaura.com. Contact us about privacy at support@cvaura.com.

2. What we collect and why

• Resume file (PDF). Read into text in server memory to generate your score, cover letter, or tailored rewrite. The file itself is discarded immediately after processing and is never written to disk or a database.
• Job description text you paste, used the same way and, for signed-in users, kept alongside the generated result (see below) so you can revisit it.
• Generated results (ATS score, subscores, matched/missing keywords, suggestions, cover letters, tailored rewrites): kept for signed-in users as their saved history, so they can return to a past result. Anonymous users get a temporary result tied to a signed browser cookie, automatically deleted after 7 days.
• Account data: name, email, and (if you sign in with Google) the basic profile Google shares for authentication. Passwords are never stored in plain text.
• Billing data: handled by 2Checkout (see section 4). We keep your subscription status, not your card details.
• Basic technical data: IP address and request metadata, used only for abuse prevention (rate limiting) and kept in short-lived, in-memory counters, not a permanent log tied to your identity.

3. What we do not do

We do not sell your data. We do not use third-party advertising trackers or analytics scripts on cvaura.com. We do not use your resume or job description to train any AI model. Content you generate is used only to serve your own request.

4. Who we share data with

• Google Gemini (Google LLC), our AI provider: your resume text and job description are sent to Gemini solely to generate your score, cover letter, or rewrite in real time; Google processes this as our subprocessor under its API terms, not to train its models on your submissions through this integration.
• 2Checkout (Verifone), our payment processor for every purchase: 2Checkout collects and processes your payment details directly, calculates tax, and is who your bank statement shows as the merchant. We receive only your subscription/transaction status from 2Checkout, not your card number.
• Neon (our database host) and Vercel (our hosting provider), both bound by standard data-processing terms, store the account and results data described above on our behalf.
• Google OAuth, if you choose to sign in with Google, to authenticate you; we receive only your name, email, and profile photo, not your Google account credentials.

We do not share your data with anyone else.

5. Cookies

We use two functional cookies, no advertising or analytics cookies: a session cookie once you sign in (kept up to 30 days, or until you sign out), and a signed anonymous identifier used to give free, non-account users a temporary result and to apply fair-use rate limits (kept up to 7 days). Neither cookie is used for tracking across other sites.

6. How long we keep data

Uploaded resume files: never stored, discarded immediately after processing. Anonymous results: deleted automatically after 7 days. Signed-in account data and saved results: kept until you delete them or close your account. Billing records are kept as required by tax and accounting law, generally handled by 2Checkout.

7. Your rights

You can access, export, or delete your saved results from your dashboard, or request full account deletion by emailing support@cvaura.com. Depending on where you live, you may have additional rights (for example under the GDPR or CCPA) to access, correct, or object to processing of your personal data; we honor these requests regardless of location.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect data from them.

9. Changes

If we materially change how we handle your data, we will update the effective date above and, for signed-in users, make reasonable efforts to notify you.

10. Related pages

See also our Terms of Service and Refund Policy.