Privacy Policy
This Privacy Policy explains what information BeautifulCV collects, how we use it, who we share it with, and the choices you have. By using BeautifulCV you agree to the practices described here.
Last updated: May 29, 2026
BeautifulCV (“BeautifulCV”, “we”, “us”, or “our”) operates the resume generation service available at app.beautifulcv.com. This policy applies to that service and any related pages.
Information We Collect
We only collect information needed to run the service.
Account information. You sign in with Google. Through Google OAuth we receive your name, email address, and profile identifier. We do not receive your Google password.
Career data (Master Vault). When you build your profile or upload a resume, we store the career data you provide — including your contact details (name, email, phone, location, LinkedIn, GitHub, website), work experience, projects, education, skills, certifications, organizations, publications, and honors. Uploaded resume files (PDF or DOCX) are parsed into structured text.
Job descriptions. Job descriptions you paste in to tailor a resume are stored and processed.
Payment information. Paid plans are handled by Lemon Squeezy, our merchant of record. Lemon Squeezy collects and processes your payment details; we receive only your subscription status and limited billing metadata. We never see or store your full card number.
Technical data. Standard logs such as IP address, browser type, and timestamps, used for security and debugging.
How We Use Your Information
- Provide the core service: store your Master Vault and generate tailored resumes.
- Run the AI tailoring pipeline (job-description parsing, gap analysis, resume reframing).
- Authenticate you and keep your account secure.
- Process subscriptions and payments.
- Diagnose problems, prevent abuse, and improve the product.
- Communicate service or account notices.
We do not sell your personal information, and we do not use your career data to train AI models.
AI Processing
To tailor your resume, the relevant parts of your career data and the job description are sent to the Anthropic Claude API. Anthropic processes this data to return generated content and does not use API inputs or outputs to train its models. See Anthropic’s privacy terms for details.
Third-Party Service Providers
We share data only with providers required to operate the service:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, hosting | Account and career data |
| Anthropic (Claude) | AI resume tailoring | Career data, job descriptions |
| Lemon Squeezy | Payment processing | Billing details, email |
| Sign-in (OAuth) | Authentication tokens |
Each provider processes data under its own privacy policy and only on our instructions.
Data Retention
We keep your data for as long as your account is active. If you delete specific items, they are removed from your Master Vault. If you delete your account, your associated data is permanently erased from our active databases; residual copies in backups are removed on the normal backup rotation cycle.
Your Rights
You can:
- Access and edit your data directly in the app.
- Export your resumes as PDF.
- Delete individual entries or your entire account and all associated data.
- Withdraw consent by ceasing use and deleting your account.
Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA), you may have additional rights to access, correct, port, or erase your data. To exercise these, contact us at the address below.
Data Security
Data is stored in Supabase with row-level security so each user can only access their own records. Connections are encrypted in transit (TLS). Server-side secrets are never exposed to the browser. No system is perfectly secure, but we take reasonable measures to protect your information.
Cookies
We use only essential cookies required for authentication and session management. We do not use advertising or third-party tracking cookies.
Children’s Privacy
BeautifulCV is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
International Transfers
Our providers may process data in countries other than yours, including the United States. Where required, transfers are covered by appropriate safeguards.
Changes to This Policy
We may update this policy as the service evolves. Material changes will be reflected by the “Last updated” date above and, where appropriate, an in-app notice.
Contact
Questions about this policy or your data? Email us at triwritescode@gmail.com.