Privacy Policy & Data Protection
Last Updated: October 7, 2026
Zero Reselling of Resume Data
Your resumes, contact details, work history, and target roles are strictly yours. We never package, anonymize, or sell your professional information to third-party data brokers, headhunters, or advertisers.
Ephemeral AI Processing
Prompts processed via Google Gemini API are transmitted securely over TLS 1.3 and are strictly ephemeral. Your text is processed for immediate inference and is never used to train public foundation models.
Local-First Client Storage
Master Resumes, guest drafts, and customization preferences are saved directly to your local browser storage by default. You retain full physical custody of your work history on your machine.
Immediate Right to Erasure
You can purge your entire cloud footprint, stored resumes, application logs, and session history at any moment with a single click in your account settings.
1. Information We Collect
We collect information you explicitly provide when using CVFinch AI, including:
- Resume Content: Work history, education, skills, and summary text uploaded or dictated by you.
- Target Job Postings: Job descriptions pasted into the editor or extracted via our 1-click URL importer and Chrome Extension.
- Account Credentials: Email address and encrypted session authentication tokens.
- Payment Metadata: SBP PayFast basket transaction IDs and fulfillment status. We never store credit card numbers (PAN) or banking CVVs on our servers.
2. How AI Models Process Your Data
CVFinch AI operates as an intelligent orchestrator using Google Gemini Enterprise APIs. When you tailor a resume or draft a cover letter:
- Data is transmitted securely over encrypted 256-bit TLS connections.
- Under our Google Cloud enterprise service terms, prompts and candidate inputs are NOT used to train foundational AI models.
- Inference outputs are returned directly to your secure browser session.
3. Data Retention & Deletion
Guest sessions are stored strictly on your local device via Web Storage (localStorage). If you authenticate with an account, your tailored application packages are saved to your private cloud profile so you can access them across devices. You can permanently delete any saved document or close your account at any time.
4. Contact Our Data Privacy Desk
If you have any questions regarding your data rights or wish to execute a formal GDPR erasure request, contact our unified privacy & support desk at: