CV KloudCV Kloud

Privacy Policy

1. Introduction

At [Legal Entity Name] ("we", "us", "our", or "CV Kloud"), we're committed to protecting your privacy in line with India's Digital Personal Data Protection Act, 2023 ("DPDPA"), as it may be amended from time to time.

This policy explains what personal data we collect from you, why we collect it, how we use and protect it, and the choices and rights you have over it. It applies to everyone who uses CV Kloud.

If you are under 18, please only use CV Kloud with the involvement of a parent or guardian.

2. How we collect your personal data

We collect personal data when you:

  • Create an account -- with your name, email address, and a password, or via your Google account.
  • Complete your profile -- phone number, location, gender, and a profile photo, if you choose to add them.
  • Build a resume -- work history, education, skills, competencies, certifications, and any other content you add, type, or ask our AI to help write.
  • Upload an existing resume (PDF, DOCX, or image) to have it read and pulled into the builder.
  • Contact us directly, such as through the Contact Us page or by email.

3. Types of personal data we collect

  • Contact information: name, email address, phone number, location.
  • Account credentials: your password (stored as a one-way hash, never in plain text) or your Google account identifier.
  • Profile details: gender, address, and a profile photo, if provided.
  • Resume/professional profile content: education, work experience, skills, competencies, summaries, and any custom sections you add.

We do not currently collect payment card or bank details -- CV Kloud does not process payments directly at this time.

4. How we use your personal data

  • To create, save, render, and let you export your resumes.
  • To power our AI features -- the guided resume-building chat, extracting your details from an uploaded resume, suggesting content or wording improvements, and checking your resume against a job description.
  • To verify your identity and keep your account secure, including one-time codes for sign-up and password resets.
  • To respond to questions or requests you send us.
  • To comply with legal obligations that apply to us.

We only use your personal data for the purposes described here, or for a closely related purpose. If that ever changes, we'll notify you and, where the law requires it, ask for your consent again.

5. Consent

By creating an account and using CV Kloud, you consent to the collection and use of your personal data as described in this policy. Where we rely on your consent for a particular use, you can withdraw it at any time by deleting your account or by contacting us -- see Section 13 below. We'll let you know if withdrawing consent means we can no longer provide a particular feature (for example, we can't render a resume for a profile with no information in it).

6. Who we share your data with

We don't sell your personal data, and we don't share it with recruiters, employers, or training providers on your behalf. We share it only with the service providers that help us run CV Kloud, strictly for the purpose listed:

  • OpenAI -- to power the AI resume-building, resume-parsing, and suggestion features.
  • Google -- if you choose to sign in with your Google account.
  • Amazon Web Services -- to host our infrastructure and to store your profile photo, if you upload one.
  • Our email delivery provider -- to send login codes and account notifications.

Beyond this, we'll only disclose your personal data if required by law, to protect someone's safety, or to investigate suspected fraud or misuse of the service.

7. International data transfer

Our infrastructure is primarily hosted in India. Some service providers we rely on for specific features (such as OpenAI, for the AI features) process data outside India. Where that happens, we only work with providers that maintain appropriate data protection safeguards.

8. Cookies and local storage

CV Kloud doesn't use cookies for tracking or advertising. We use your browser's local storage only to keep you signed in between visits -- this stays on your device and isn't used to track you across other sites.

9. Data accuracy

We take reasonable steps to keep the data we hold accurate and up to date, but since most of it comes directly from you, please keep your profile and resume content current -- an outdated resume won't serve you well either.

10. Data security

We take reasonable technical and organisational measures to protect your data, including hashing passwords and one-time codes rather than storing them in plain text, and limiting access to your data to what's needed to operate the service. No method of transmission over the internet is completely secure, so while we work to protect your data, we can't guarantee its absolute security.

11. Data retention

We keep your account and resume data for as long as your account is active. Removing a resume hides it from your account immediately; the underlying record may be kept for a limited period afterwards for accounting and quota-integrity purposes, rather than being erased instantly. Files you upload to have a resume read into the builder are used only for that one-time extraction and are not stored afterwards.

12. Your rights

Under the DPDPA, and as a matter of how we operate regardless, you have the right to:

  • Know what personal data we hold about you and how it's used.
  • Access and receive a copy of your personal data.
  • Correct or update inaccurate or incomplete data.
  • Request erasure of your personal data, subject to any legal or accounting reasons we may need to retain some records.
  • Withdraw consent and raise a grievance about how your data is handled.

You can exercise most of these rights directly within the app (editing or deleting your resumes and profile). For anything else, contact us as described in Section 15.

13. Withdrawing consent and closing your account

You can withdraw your consent to our processing of your personal data, or close your account entirely, at any time by contacting us or using the account deletion option in the app. Please note that withdrawing consent may mean we're no longer able to provide the service to you.

14. Data breach notification

If a data breach occurs that affects your personal data, we'll take reasonable steps to contain it and notify affected individuals and the relevant authorities, as required under applicable Indian law.

15. Contacting us

For any questions, requests, or complaints about this policy or how we handle your personal data, contact our Grievance Officer at privacy@cvkloud.com, or through our Contact Us page. We'll respond within a reasonable time.

16. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. We'll post the updated policy here and update the date at the top. Your continued use of CV Kloud after a change takes effect means you accept the updated policy.

17. Governing law and jurisdiction

This policy is governed by the laws of India. You agree that the courts at Lucknow, Uttar Pradesh shall have exclusive jurisdiction over any dispute arising from it.