This Privacy Policy explains how CV-Bloom(“we”, “us”, the “Service”), operated by Dhafer Souid, collects, uses, and protects your information when you use our website at cv-bloom.com and the application. By using the Service you agree to the practices described here.
1. Information we collect
- Account information. When you create an account we collect your email address and a securely hashed password. We use passwordless email (magic link) confirmation to verify your address.
- Resume and job content you provide. The resume (CV) files you upload and the job descriptions you paste are processed to produce your tailored documents. This content is processed transiently to fulfill your request and is not retained in our database after processing. Generated files are available to you for download during your session.
- Payment information. Purchases are handled by our payment processor, Dodo Payments. We do not see or store your full card details. We keep a record of your purchases (pack, amount, date) to manage your credits.
- Usage and analytics. We use privacy-friendly, cookieless web analytics (Vercel Web Analytics) to understand aggregate traffic. We also keep a ledger of credits purchased and used.
- Technical data. A session identifier (cookie) lets guests use the free generation without an account; basic log data (e.g. IP address) may be processed by our hosting providers for security and reliability.
2. How we use your information
- To provide the Service — parse your resume, tailor it, and generate documents.
- To create and secure your account and send transactional emails (e.g. login links, receipts).
- To process payments and manage your credit balance.
- To maintain, protect, and improve the Service and prevent abuse.
3. Service providers (sub-processors)
We share data only as needed with the providers that power the Service. Each processes data on our behalf under their own terms:
- AI processing — your resume and job description text are sent to our AI model provider (OpenRouter and the model hosts it routes to) to generate tailored content.
- Database & authentication — Supabase (stores your account email, hashed password, and credit records).
- Email delivery — Resend (sends login links and receipts).
- Payments — Dodo Payments (processes purchases).
- Job-link import — when you choose to import a job posting from a URL, the URL may be fetched via a third-party scraping provider (Bright Data) to retrieve the posting text.
- Hosting & analytics — Vercel and Amazon Web Services (AWS).
4. Data retention
We retain your account information and purchase records for as long as your account is active or as needed to provide the Service and comply with legal obligations. Uploaded resume content and job descriptions are not stored in our database after your request is processed. You may request deletion of your account at any time.
5. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at dhafer.souid@esprit.tn. We will respond within a reasonable timeframe.
6. Security
We use industry-standard measures (encryption in transit, hashed passwords, access controls) to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and address vulnerabilities promptly.
7. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from them.
8. International transfers
Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
10. Contact
Questions about this policy or your data? Email dhafer.souid@esprit.tn.