Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

1. Introduction

CV-BY-JD ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume and career tools platform at cv-by-jd.com (the "Service"). By using our Service, you consent to the data practices described in this policy.

We have not completed a formal certification, independent assessment, or audit attesting to compliance with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA ("CCPA"), or any other specific privacy law. We do not represent that we are compliant with any of these frameworks, and nothing in this Privacy Policy should be construed as a statement of compliance.

That said, we acknowledge our users' privacy and take it seriously. We aim to limit the data we collect, the third parties with whom we share it, and the time we retain it. We provide self-service tools to export and delete your account data (see Section 13). If you have a privacy question or want to exercise a specific right, contact us at hi@cv-by-jd.com.

2. Information We Collect

We collect information you provide directly to us, including:

Account Information

• Name and email address (via Google or LinkedIn OAuth)
• OAuth provider identifiers
• Account preferences and settings

Resume and Career Data

• Resume content and documents you upload
• Job descriptions you provide
• Career information and work history
• Educational background and skills

Usage Data

• Chat conversations with our AI assistant
• Service usage patterns and preferences
• Credit usage and transaction history
• Device and browser information
• IP address and general location data

Temporary User Data

• Guest user identifiers stored in browser localStorage
• Trial credit usage before account creation
• Temporary chat sessions

3. How We Use Your Information

We use the information we collect to:

• Provide and improve our AI-powered resume services
• Process your requests and respond to your inquiries
• Generate AI-based content and recommendations
• Manage your account and authenticate your identity
• Track credit usage and process payments
• Send service-related communications
• Analyze usage patterns to improve our Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. AI Processing and Data Usage

Our Service uses artificial intelligence to process your data:

• Your resume content, job descriptions, and chat messages are sent to third-party AI providers to generate scoring, rewrites, and chat replies.
• We use a fallback ladder of multiple AI providers. If a higher-tier provider fails or times out, your inputs are re-sent to the next provider in the ladder. The ladder, in priority order, is:
  1. Qwen models, accessed via OpenRouter (a third-party AI gateway)
  2. DeepSeek models, accessed via OpenRouter
  3. Google Gemini, via Google Cloud Vertex AI
  4. OpenAI GPT models
• Each provider receives the data it needs to produce a response: the current resume, the relevant job description, and recent chat history. We do not include your name, email, or account identifiers in the prompt body itself.
• OpenRouter acts as an intermediary processor between us and the Qwen and DeepSeek providers. Your inputs and outputs transit OpenRouter before reaching the underlying model.
• Some providers may retain prompts and completions according to their own data-handling policies. We have configured our OpenRouter workspace to use endpoints that do not train on or publish your data. We cannot guarantee the retention behavior of providers we do not directly control; please review each provider's privacy policy for details.
• We do not use your personal data to train our own AI models.
• Chat history is retained on our servers to provide context for ongoing conversations and is included in subsequent requests to AI providers as long as the chat exists. Deleting a chat removes that history from subsequent requests; deleting your account hard-deletes all chats and messages from our database.
• You can delete your data at any time from this page. You must be logged in to access the data deletion option.

For details on how each AI provider handles data, please refer to their published privacy policies (Qwen via OpenRouter; DeepSeek via OpenRouter; Google; OpenAI). We select providers and configure our gateway to limit training-data use, but we encourage you to review their policies independently.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party services that help us operate our platform. The current list includes:
  • AI providers: Qwen and DeepSeek (via OpenRouter), Google Gemini (via Vertex AI), OpenAI
  • Payments: Stripe and Dodo Payments (international), Razorpay (India)
  • Authentication: Google OAuth, LinkedIn OAuth
  • File storage: Cloudflare R2 (profile photos)
  • Database hosting: MongoDB Atlas
  • Hosting and edge delivery: Vercel
  • Error tracking and observability: Sentry
  • Bot protection: Google reCAPTCHA
  Each receives only the data needed to perform its function. See Section 10 for the third-party services list.
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to sharing

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS
• Secure storage of sensitive information
• Access controls and authentication mechanisms
• Regular security assessments and updates

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security of your data.

6a. Logging and Error Tracking

We use Sentry to track errors and monitor system health. When an AI provider call fails, retries, or times out, we log the following to Sentry: your internal user ID, the chat ID, the provider name, the model name, the tier in our fallback ladder, an error category, and a truncated error message (no prompt content beyond a short snippet from the provider response when it cannot be parsed). Sentry retains this data according to its standard retention period under our subscription plan. Account deletion does not automatically purge Sentry logs; to request removal of your historical error logs from Sentry, contact us at hi@cv-by-jd.com.

We do not send the contents of your resume, job descriptions, or chat messages to Sentry under normal operation.

7. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes outlined in this policy. Specifically:

• Account information: Retained while your account is active
• Resume data: Retained until you delete it or close your account
• Chat history: Retained for service continuity unless deleted by you
• Transaction records: Retained as required for legal and accounting purposes
• Temporary user data: Automatically deleted after 30 days of inactivity

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data through the data export feature in your account settings
• Correction: Update or correct inaccurate information through your profile settings
• Deletion: Request deletion of your account and associated data through the account deletion feature in your settings
• Portability: Export your data in a structured, machine-readable format using the data export feature
• Opt-out: Unsubscribe from marketing communications through your account preferences

To exercise these rights, you can use the self-service options in your account settings or contact us at hi@cv-by-jd.com.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authentication state
• Remember your preferences
• Analyze usage patterns and improve our Service
• Provide security features

You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of our Service.

10. Third-Party Services

Our Service integrates with third-party services that have their own privacy policies:

• Google: OAuth authentication; reCAPTCHA bot protection; Gemini AI via Google Cloud Vertex AI
• LinkedIn: OAuth authentication
• OpenAI: GPT models for AI processing in our fallback ladder; also used when you access CV By JD inside the ChatGPT app
• OpenRouter: AI gateway routing requests to Qwen and DeepSeek models
• Stripe: payment processing (international)
• Dodo Payments: payment processing (international, including multi-currency checkout)
• Razorpay: payment processing (India)
• Cloudflare R2: storage for profile photos
• MongoDB Atlas: database hosting
• Vercel: web hosting and edge delivery
• Sentry: error tracking and system observability (see Section 6a)

We encourage you to review the privacy policies of these third-party services.

10a. ChatGPT App (CV By JD)

If you use the CV By JD app inside ChatGPT, the resume text and job description you provide are sent to our servers to compute scores and rewrites. The resume text and job description you submit are stored on our servers as part of your chat or job history so you can return to past requests, and are processed by the same AI providers listed in Section 4. If you sign in via Google, your revised resumes and credit history are stored on the same account as your use of our website. You can delete this data at any time by deleting the relevant chat or your account. We never sell or share this data with third parties beyond the service providers listed in Sections 5 and 10 under their respective data-handling agreements.

11. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers.

13. Data Deletion and Account Closure

You have the right to delete your account at any time. When you delete your account:

• Your resume data, chat history, messages, and authentication tokens are permanently deleted from our active database
• Profile photos are deleted from Cloudflare R2 storage
• Your user record is anonymized rather than fully deleted: your email is replaced with a non-routable placeholder (e.g. deleted_<id>@anonymized.local), your display name becomes "Deleted User," and OAuth provider IDs are redacted
• Payment records are anonymized but retained for legal and accounting compliance
• Error logs in Sentry that reference your internal user ID may persist according to Sentry's standard retention period under our subscription plan; contact hi@cv-by-jd.com to request earlier removal
• AI provider logs (with the providers themselves) follow each provider's own retention policy and are outside our direct control
• The deletion process is irreversible

To delete your account, go to your account settings and use the "Delete Account" option, or contact us at hi@cv-by-jd.com.

14. California Privacy Rights (CCPA)

California Residents (CCPA/CPRA): We are not compliant with the CCPA/CPRA. The following rights are honored where feasible and applicable:

• Right to Know: You can request information about what personal data we collect, use, and share
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: We do not "sell" personal information as that term is defined by the CCPA/CPRA. If we engage in any activities deemed "sharing" for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, use the self-service options in your account or email us at hi@cv-by-jd.com.

15. European Privacy Rights (GDPR)

EEA/UK (GDPR): We are not compliant with the GDPR. The following rights are honored where feasible and applicable:

• Right to Access: Obtain confirmation and access to your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to certain processing of your data
• Right to Restrict Processing: Request limited processing of your data

Our lawful basis for processing personal data is your consent and our legitimate interests in providing our services.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

17. Service Continuity Disclaimer

CV-BY-JD is operated as an individual project, not by a registered company. As such:

• The service may be discontinued at any time without prior notice
• In the event of service discontinuation, all data and accounts will be permanently deleted
• No guarantees are made regarding service availability or longevity
• Users are advised to regularly export their data using the export feature
• No refunds will be provided if the service is discontinued

By using this service, you acknowledge and accept these conditions.

18. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: