Privacy Policy

The short version

• We use your resume only to give you the service: analysis, rewrites, templates, downloads and sending.
• We don’t sell your data, and we don’t show you ads.
• Your resume content is sent to our AI provider to generate results. It isn’t used to train AI models.
• You can delete any resume at any time, and you can ask us to delete your whole account.

What we collect

Account information

Your name, email address and a securely hashed password. If you sign in with Google, we receive your name, email and profile picture from Google instead of a password.

Resume content

When you upload a CV (PDF, Word or image), we extract its text and store it with the structured resume we build from it. We don’t keep the original uploaded file. We also store what you create in NovaCV:

• edits and previous versions
• AI analyses and job matches
• cover letters, interview prep and LinkedIn suggestions
• any optional profile details you choose to add (photo, birthdate, nationality, civil status, gender)

Only add optional profile details if you want them on your resume. They are never required.

Job applications

If you use the application tracker, we store the companies, roles, links, contact emails, notes and dates you enter, so we can send you follow-up reminders.

Emails you send through NovaCV

When you email a resume to a recruiter, we send it on your behalf and keep a record of the recipient address, subject and time, so you can see your send history.

Payments

Payments are handled by PayPal or PayMongo. We never see or store your card or wallet details. We keep a record of what you bought, the amount, currency and the provider’s transaction reference.

Technical data

Like any website, our hosting provider receives your IP address and browser details when you visit. We use your approximate country to show prices in the right currency and route you to the right payment provider.

Usage analytics

We use Vercel Web Analytics to count page visits and key steps, such as signing up, uploading a CV and downloading a resume. This helps us see which parts of NovaCV work. It doesn’t use cookies, doesn’t follow you across other sites, and never includes your resume content, name or email.

How we use it

• To run the service: analyze, enhance and render your resumes, and save your work.
• To manage your account, trial, credits and subscription.
• To send emails you ask for: resumes to recruiters, follow-up reminders and account-related messages.
• To credit referrals when someone you invited makes their first purchase.
• To keep NovaCV secure, prevent abuse and fix problems.

We process your data because it’s needed to provide the service you signed up for (contract). We also rely on our legitimate interest in keeping NovaCV secure, and on your consent for optional details you choose to add.

AI processing

NovaCV uses Claude, made by Anthropic, to analyze and rewrite resumes. When you run an AI feature, the relevant content is sent to Anthropic’s API and the result is returned to us. Under Anthropic’s commercial terms, content sent through its API isn’t used to train its models.

AI output can contain mistakes. Always review your resume before you send it.

Who we share it with

We share data only with the service providers below, and only as far as they need it to run NovaCV. We don’t sell or rent personal data.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or of NovaCV.

Shared resume links

If you turn on sharing for a resume, anyone with the link can view and download it. Shared pages are hidden from search engines. You can turn sharing off at any time, and the link stops working immediately.

Cookies

We only use cookies that NovaCV needs to work. There are no advertising or cross-site tracking cookies.

• Session cookie: keeps you signed in.
• Referral cookie (30 days): remembers who invited you, so they get credit if you buy something.
• Sidebar preference: remembers whether you collapsed the dashboard sidebar.

How long we keep it

We keep your account and resumes until you delete them or ask us to delete your account. When you delete a resume, it’s removed from our database. When you delete your account, we delete your resumes, applications and profile.

We keep payment records for as long as tax and accounting law requires.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR, the Philippine Data Privacy Act or US state laws), you can:

• access the personal data we hold about you and get a copy of it
• correct it (you can edit most of it yourself in the dashboard)
• delete it: delete resumes yourself, or email us to delete your account
• object to or restrict certain processing
• withdraw consent for optional details at any time, by removing them
• complain to your local data protection authority

To make a request, email support@novacv.app from the address on your account. We’ll respond within 30 days.

Security

Passwords are hashed, never stored in plain text. Data travels over HTTPS, and access to our systems is limited. No online service can be perfectly secure, but we work to protect your information and will notify you if a breach affects it.

International transfers

NovaCV is used worldwide, and our providers may process data in countries other than yours, including the United States. Where required, transfers rely on safeguards such as standard contractual clauses.

Children

NovaCV isn’t intended for anyone under 16. We don’t knowingly collect data from children. If you believe a child has given us personal data, contact us and we’ll delete it.

Changes to this policy

If we make significant changes, we’ll update the date at the top of this page and, where appropriate, let you know by email.

Contact

Questions about privacy? Email support@novacv.app. See also our Terms of Service.