VantageCV Privacy Policy

VantageCV ('we,' 'our,' or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume optimization platform.

By using VantageCV, you agree to the collection and use of information in accordance with this policy.

Personal Information: When you create an account, we collect your name, email address, and profile information provided through Replit authentication.

Resume Data: When you upload or paste your resume, we temporarily process this content to provide our AI-powered analysis and optimization services.

Usage Data: We collect information about how you interact with our service, including features used, session duration, and preferences.

Payment Information: Payment processing is handled securely by Stripe. We do not store your complete payment card details.

We use the information we collect to:

• Provide and maintain our resume optimization services

• Process your transactions and manage your subscriptions

• Improve our AI algorithms and service quality

• Communicate with you about your account and service updates

• Ensure the security and integrity of our platform

VantageCV uses Google's Gemini AI (specifically Gemini 3 Pro Preview) to analyze and provide suggestions for your resume. When you use our AI-powered features:

Data Sent to Google Gemini:

• Your resume content (for analysis, scoring, and optimization suggestions)

• Job title, company name, and job description (for match scoring and Safety Check)

• Text you paste into Quick Tools (for polishing and formatting)

How Google Processes This Data:

• Data is transmitted securely using TLS encryption

• Google processes your data solely to generate AI responses for VantageCV

• VantageCV does not use your data to train any AI models

• AI processing occurs in real-time to deliver the service

• Google's handling of API data is governed by their terms of service and data processing agreements

For complete information about how Google handles data sent through its AI APIs, please refer to Google's Privacy Policy, Data Processing Terms, and Gemini API Terms of Service.

We practice data minimization and retain your information only as necessary:

What We Store (Persistent):

• Account information (name, email) - retained while your account is active

• Authentication session - stored securely for 7 days or until you log out

• Subscription and payment status - retained for billing purposes

What We Do NOT Store (Ephemeral/Session-Only):

• Resume content - exists only in your browser session memory

• AI analysis results (match scores, critiques, suggestions) - stored only in browser memory

• Job descriptions and company information you provide - not saved to our database

• Safety Check analysis results - stored only in browser memory

When Session Data Is Automatically Deleted:

• When you create a new project (previous analysis is replaced)

• When you refresh or close your browser

• When you log out of your account

• Temporary PDF exports are automatically deleted from our servers after 10 minutes

This ephemeral approach means your resume and analysis data is under your control. If you want to keep your optimized resume, you must export it as a PDF before ending your session.

You can request deletion of your account and associated data at any time through the Settings panel in your dashboard.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest

• Secure authentication via Replit's OAuth system

• Regular security assessments and updates

• Access controls limiting data access to authorized personnel

We use the following third-party services (subprocessors) to provide our services:

• Replit (USA): Hosting, infrastructure, and authentication

• Google Gemini AI (USA): Resume analysis and AI processing

• Stripe (USA): Payment processing

Each subprocessor is contractually bound to handle your data in accordance with applicable data protection laws.

For users in the European Economic Area (EEA), UK, and Switzerland, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the services you requested (resume analysis, account management)

• Legitimate Interest: Processing for service improvement, security, and fraud prevention

• Consent: Where you have explicitly consented to specific processing activities

• Legal Obligation: Processing required to comply with applicable laws

VantageCV is operated from the United States. If you are located outside the United States, please be aware that your data will be transferred to and processed in the United States.

For EEA/UK users: We rely on Standard Contractual Clauses (SCCs) approved by the European Commission and supplementary measures to ensure adequate protection for international data transfers.

All Users Have the Right To:

• Access the personal information we hold about you

• Request correction of inaccurate data

• Request deletion of your data

• Withdraw consent for data processing

• Export your data in a portable format

Additional Rights for EEA/UK Residents (GDPR):

• Right to object to processing based on legitimate interests

• Right to restrict processing

• Right to lodge a complaint with your local data protection authority

Additional Rights for California Residents (CCPA/CPRA):

• Right to know what personal information is collected, used, and disclosed

• Right to delete personal information

• Right to opt-out of the sale or sharing of personal information (Note: VantageCV does not sell your personal information)

• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at vince.lupe@gmail.com. We will respond within 30 days (or as required by applicable law).

VantageCV uses essential cookies required for the service to function (such as session authentication cookies). We do not use third-party tracking cookies or behavioral advertising.

• Session Cookies: Used to maintain your login session (expires after 7 days or logout)

• Preference Cookies: Used to remember your language and theme preferences (stored locally in your browser)

VantageCV is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete such information.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new 'Last Updated' date. For significant changes, we may also notify you via email or through the service.

Your continued use of VantageCV after changes are posted constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us at:

vince.lupe@gmail.com

For GDPR-related inquiries, this email serves as our primary contact point for data protection matters.