Your data, your control. Transparency is core to CVorah AI.
You can delete your data or your account at any time by going to app.cvorah.com/settings and using the available data deletion or account deletion options.
Where applicable, CVorah AI acts as the data controller for personal data processed through the website, user accounts, dashboards, payments, support communications, and CV analysis services.
CVorah AI is committed to handling personal data responsibly, transparently, securely, and proportionately. We aim to follow data protection principles such as lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, confidentiality, integrity, and accountability.
We do not collect personal data simply because it may be useful in the future. We process information only where it supports a clear platform purpose, such as providing CV analysis, maintaining your account, managing paid access, preventing abuse, improving reliability, complying with legal obligations, or responding to user requests.
Depending on how you use CVorah AI, we may process the following categories of data:
Uploaded CVs, resumes, and related career documents are processed only to generate the analysis, feedback, recommendations, reports, and platform features requested by the user. This may include extracting text, identifying sections, reviewing keywords, evaluating structure, generating summaries, and producing AI-assisted career suggestions.
CVorah AI does not store or retain uploaded CV files, resumes, or original career documents after the processing operation is completed. The uploaded document is used only for the requested analysis and is deleted after processing.
CVorah AI may store the generated report, analysis results, usage records, and account-related information needed to provide dashboard history, billing access, security, and user-requested platform features.
CVorah AI does not sell uploaded CVs or resumes. We do not use uploaded CVs for unrelated advertising, third-party marketing, or resale. We also do not intentionally make uploaded CVs public.
Where GDPR or similar data protection laws apply, CVorah AI may rely on one or more legal bases depending on the specific processing activity:
We use personal data only for legitimate and limited platform purposes, including:
CVorah AI does not sell your personal data. We do not rent uploaded CVs, trade resume information, or disclose personal data to advertisers for independent use. We do not use uploaded CVs or resumes for third-party marketing.
If we use third-party providers for hosting, authentication, payment, analytics, email, AI processing, security, or infrastructure, they may process limited data only as needed to provide services to CVorah AI and subject to their own security, privacy, and contractual obligations.
CVorah AI uses automated and AI-assisted systems to analyze CVs and generate career-related insights, scores, keywords, suggestions, summaries, and reports. These outputs are generated for informational and decision-support purposes only.
AI-generated outputs may contain errors, omissions, outdated information, irrelevant suggestions, formatting issues, or recommendations that are not suitable for every employer, country, role, industry, applicant tracking system, or personal circumstance.
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention may depend on the type of data, the user’s account settings, service functionality, billing obligations, security needs, fraud prevention, dispute resolution, and legal requirements.
When data is no longer needed, we delete, anonymize, or securely restrict it, unless continued retention is necessary for legal, security, billing, accounting, or dispute-resolution purposes.
CVorah AI may use essential cookies required for website operation, authentication, security, session management, cookie consent storage, and platform functionality. Where required, analytics or non-essential cookies are used only according to your consent choices.
Cookies may help us remember preferences, understand general platform usage, improve performance, detect errors, and maintain security. You can review more details and manage preferences through our Cookie Policy.
If you purchase a paid plan, subscription, or usage-based service, payment processing may be handled by a third-party payment provider. CVorah AI does not store full card numbers or sensitive payment credentials.
We may process payment status, subscription status, plan access, transaction references, usage limits, billing events, refund requests, cancellation records, and access history to provide paid services, manage account access, prevent fraud, comply with legal obligations, and resolve billing disputes.
Payment providers may process payment data according to their own terms, privacy policies, security standards, and legal obligations.
CVorah AI may rely on trusted third-party providers for hosting, database management, authentication, payments, analytics, email delivery, AI infrastructure, file processing, security monitoring, error logging, and other technical operations.
These providers may process limited data only as necessary to support CVorah AI. We aim to use providers that offer appropriate technical, organizational, privacy, and security safeguards. However, third-party services may be governed by their own terms, policies, infrastructure availability, and legal requirements.
Some third-party providers may process or store data outside your country of residence, including outside the European Economic Area. Where required, CVorah AI aims to rely on appropriate transfer mechanisms, safeguards, contractual protections, or provider compliance measures designed to protect personal data.
Because cloud, AI, payment, and infrastructure providers may operate internationally, users should not upload unnecessary sensitive information or documents that are not needed for the requested CV analysis.
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, misuse, loss, alteration, disclosure, or destruction. These measures may include access controls, secure infrastructure, encrypted connections, provider security controls, monitoring, logging, account protections, and internal restrictions.
No online service, AI system, cloud provider, or internet transmission can guarantee absolute security. Users are responsible for keeping their account credentials confidential and for notifying us if they suspect unauthorized access or misuse.
Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to processing, withdraw consent, request portability of your personal data, and challenge or request information about automated processing where applicable.
Under GDPR, these rights may include access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, and rights related to automated decision-making. These rights may be subject to legal limits, verification requirements, security checks, or retention obligations.
CVorah AI gives logged-in users direct control over certain data deletion actions from the account settings area, where available.
When a user deletes their data, CVorah AI removes saved reports and subscription or payment access records associated with the account, while the login account may remain active.
When a user deletes their account, CVorah AI deletes the user account and associated records, including saved reports and subscription or payment access records, except where limited retention is required for legal, tax, accounting, billing, security, fraud-prevention, dispute-resolution, backup, or compliance reasons.
CVorah AI is designed for CV, resume, and career-support analysis. Users should avoid uploading unnecessary sensitive personal data, confidential third-party information, official identity documents, financial credentials, passwords, medical records, criminal records, or data belonging to another person unless strictly necessary and legally authorized.
Users are responsible for reviewing documents before upload and for removing information they do not want processed. CVorah AI is not responsible for personal data that users voluntarily include in uploaded CVs, resumes, attachments, free-text fields, or support messages.
CVorah AI is not intended for children. Users should not create an account, upload documents, purchase paid plans, or submit personal data if they are not legally able to use the service under applicable law or without any required parental or guardian consent.
If we become aware that personal data has been provided by a child or minor in a way that is not permitted by law, we may delete or restrict that data.
CVorah AI may send service-related messages, such as account notices, security alerts, billing updates, report availability notifications, policy updates, or support responses. These messages are not optional where they are necessary to provide or secure the service.
If CVorah AI sends optional marketing communications, users may unsubscribe or adjust preferences where legally required and technically available.
CVorah AI aims to protect personal data and provide useful AI-assisted career feedback, but no platform can guarantee absolute accuracy, availability, security, or suitability for every user. AI-generated outputs must be reviewed by the user before being submitted to employers, recruiters, institutions, or third parties.
Privacy protections described in this policy do not remove the user’s responsibility to use the service lawfully, avoid uploading unauthorized third-party data, and follow the Terms of Use.
We may update this Privacy Policy from time to time to reflect platform changes, new features, provider changes, legal requirements, security updates, billing changes, data handling changes, or improvements to our privacy practices.
The updated version will be posted on this page with a revised effective date. Continued use of CVorah AI after the updated policy becomes available means that users have had the opportunity to review the revised policy, unless additional notice or consent is required by law.
For privacy questions, data rights, deletion requests, billing-related privacy questions, or concerns about this Privacy Policy, please contact us.