Privacy Policy

Updated November 3, 2026

CVBoost processes the file you upload to provide an automated resume analysis. The original uploaded binary file is processed in memory, not permanently stored by our application. However, extracted resume text is temporarily saved in our database so a paid AI rewrite can be generated. This text can contain personal information.

Data we process

Resume text, filename, scan results, optional contact email, purchase access status and aggregated marketing attribution (source/campaign). We do not intentionally collect health, national identification or other sensitive information; remove it from your resume before uploading.

Who processes it

Neon hosts the database; Vercel hosts the application; Lemon Squeezy processes payments; Resend can deliver emails with your generated PDF and Word attachments; and a configured external AI provider processes the resume text after a valid payment when the paid rewrite is generated automatically. Providers and international data-transfer safeguards require review by the site operator.

Retention

Unpaid source text is scheduled for removal after 30 days. Paid source text is removed after successful rewrite generation, or after 180 days if not generated. These scheduled removals operate only when the server's secured retention task is configured. The generated draft, score, saved report, email address and purchase access details may remain until you request deletion or the service is discontinued.

Your rights and requests

Request access, correction or deletion using support@cvboost.digital. We may require proof that you control the report or associated email before altering data. Do not publicly share your report link: possession of the link may grant access to its contents.

This policy must be completed with the verified operator identity, full processor documentation, lawful bases and applicable cross-border transfer notices before paid public launch.