Privacy Policy

Information we process

We process your account email, display name, application records, job descriptions and the resume text you submit for analysis. Uploaded files are sent to the application service for text extraction; the original files are not stored by the application after the request is complete.

How information is used

Information is used to provide resume matching, application tracking and account security. We do not sell personal information.

AI providers and automatic redaction

If you request an AI resume review, CVFit first removes detected names, email addresses, phone numbers, profile links, street addresses, selected personal details and reference sections on the server. Only the redacted CV, job description and target role are sent to the AI provider you selected. Automated redaction reduces risk but may not detect every possible identifier, so review your CV and avoid unnecessary sensitive information.

You may connect your own OpenAI-compatible provider or, if eligible, use the managed CVFit provider. External providers process the redacted content under their own privacy terms. User-provided API keys are encrypted at rest, are not displayed again, and are deleted when you reset the provider or delete your account. CVFit records provider mode, model and token counts for usage control, but does not store the AI review request or generated review in the AI usage log.

Storage and deletion

Application records are stored in your private account workspace. Do not upload sensitive identity, financial or health information. Contact the service operator to request account or data deletion.

Automated results

Fit and ATS scores are estimates based on text similarity and keyword coverage. They are not employment decisions or guarantees.

Contact

For privacy, support or deletion requests, use the support contact listed in the CVFit repository README.