Privacy Policy

1. Who We Are

Data controller:

2. What Data We Collect

• contact data (email, payment status, account identifier);
• resume files and job description text uploaded for analysis;
• technical data (IP address, device type, browser, activity logs);
• support and communication data when you contact support.

3. Why We Use Data

• to provide the service and perform our contract with the user;
• to generate ATS scoring, suggestions, and resume improvements;
• to ensure security and prevent abuse and fraud;
• to meet accounting and legal obligations;
• to improve product quality and support;
• to send service-related email notices described in Section 6.

4. AI Processing and Gemini

For certain analytics features, we use Gemini AI models via technology provider infrastructure. Data transfer is limited to what is necessary to process the user request.

We do not sell personal data to third parties and do not use it for purposes unrelated to providing the service to the user.

5. Legal Bases

• contract performance (delivering subscription features and service functionality);
• legitimate interests (security, product development, abuse prevention);
• legal obligations (financial and tax compliance);
• user consent, where required by law.

6. Service Email Communications

We distinguish service (transactional and operational) messages from standalone marketing or newsletter campaigns.

• Service messages. We may email you about account creation, authentication, security, subscription and payment status, delivery of results (for example when an analysis or file is ready), and short reminders tied to an action you already started in the product (for example completing a step in an optimization flow). These messages are sent because they are necessary or reasonably ancillary to the service you chose to use.
• What we do not send. We do not send broad promotional mailings, cold sales campaigns, or newsletter-style updates to our customer list, and we do not use purchased or scraped email lists.
• Volume. For a given in-product scenario, we send at most three (3) reminder emails unless you take further steps that reasonably require additional service notices.
• Legal bases. Depending on the message and your location, processing may rely on performance of our contract with you, compliance with law, and, where permitted, our legitimate interests in operating the service and reducing legitimately abandoned workflows. Where applicable law requires prior consent specifically for electronic direct marketing, we treat that rule as applying to marketing communications; the messages above are not sent as that category.
• Unsubscribe and identity. Non-essential service reminders include a clear way to opt out or manage email preferences. Messages that must be sent for security, billing, or core service delivery may continue where the law allows. We use accurate “From” information and subject lines that reflect the content.

7. Data Transfers and Retention

We may engage data processors (such as hosting, payment, and AI providers) acting under our instructions and contractual safeguards. If data is transferred outside the user's country, legally required protection mechanisms apply (including standard contractual clauses where relevant).

Retention periods are limited by processing purposes, security needs, and legal requirements.

8. User Rights

• request access to data and a copy of processed information;
• request correction or deletion of data;
• restrict or object to processing in cases provided by law;
• submit a complaint to a competent data protection authority.

Requests can be sent to: privacy@pitchmycv.com.

9. Policy Changes

We may update this Policy when product features, data processing practices, or legal requirements change. The updated version is published on this page with a revised date.