CVinci Privacy Policy

Understand our practices for collecting, using, and safeguarding your personal data.

Introduction

This Privacy Policy explains how CVinci ("CVinci," "we," "us," or "our") collects, uses, shares, and protects information when you visit or use our website cvinci.me, related applications, and any products or services that link to this Privacy Policy (collectively, the "Service"). CVinci helps users ("Users") turn resumes into shareable, trackable digital portfolios and provides analytics on viewer engagement ("Viewers").

Important note: CVinci is currently operating in pre-incorporation status while final corporate registration is being completed in the United States. All references to "CVinci" in this Policy refer to the founding team acting under the CVinci brand.

By accessing or using the Service you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Scope

This Privacy Policy applies to Personal Data (defined below) collected from or about:

Visitors to and Users of the Service;
Prospective clients and partners; and
Viewers who access content shared by Users.

When Users collect information about their own Viewers through CVinci, we process that information on the User's behalf. Each User's privacy practices govern their treatment of Viewer data; CVinci is not responsible for Users' privacy policies.

2. Information We Collect

We collect information that alone or in combination could identify you ("Personal Data").

3. How We Use Information

Provide and operate the Service, including AI-assisted CV generation, shareable links, and analytics dashboards.
Personalize your experience and remember preferences.
Improve existing features, research new ones, and troubleshoot.
Communicate about your account, security alerts, product updates, and (with consent) marketing messages.
Ensure security, detect fraud, and enforce our Terms of Service.
Comply with legal requirements and defend our rights.

Legal bases under the EU/UK GDPR: Contract necessity, Legitimate interests, Consent, and Legal obligation.

4. Cookies & Tracking Technologies

We use first- and third-party cookies, pixels, and local storage to recognize you, measure performance, and deliver relevant content. Most browsers let you block or delete cookies; doing so may affect Service functionality.

5. How We Share Information

With Service Providers — e.g., cloud hosting (AWS), AI providers (OpenAI, Anthropic), analytics (Plausible), email (Postmark), payment processing (Stripe).
With Other Users & Viewers — Analytics about a specific Viewer's engagement are visible only to the User who owns the shared link.
With Your Consent — e.g., when you integrate a third-party app.
Legal and Safety — To comply with laws or protect rights, property, or safety.
Business Transitions — In a merger, acquisition, or asset sale, data may transfer subject to this Policy.

We do not sell Personal Data.

6. International Transfers

Servers are currently in the United States. If you access the Service from elsewhere, you consent to transferring your data to the U.S. and any location where our service providers operate.

7. Data Retention

We retain data as long as necessary for the purposes outlined above, unless a longer period is required by law. You may request deletion of your account by emailing privacy@cvinci.me; data will be deleted or anonymized within 30 days unless retention is legally required.

8. Security

We use industry-standard protections such as HTTPS, encryption at rest, role-based access controls, and routine security audits. No method is foolproof; you are responsible for maintaining strong, unique passwords.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port your Personal Data, or object to processing. To exercise any right, contact privacy@cvinci.me.

Residents of California have additional rights under the CCPA/CPRA; we do not sell or share personal information for cross-context behavioral advertising.

10. Third-Party AI Providers

When you request AI-generated resume content, your prompts and relevant profile information are securely transmitted to third-party AI processors (currently OpenAI GPT and Anthropic Claude) under contractual terms that prohibit those providers from using your data for training or other unrelated purposes. Prompts and outputs are retained in your CVinci workspace and may be logged by the AI provider for abuse monitoring.

11. Do Not Track Signals

Our Service currently does not respond to browser DNT signals.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced via email (if you have provided one) or a prominent notice on the Service at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

13. Contact Us

Questions or requests? Email privacy@cvinci.me