Privacy Policy

1. What we collect

When you sign in with Google, we receive your name, email address, and profile picture. We also store the CV documents you upload and the job descriptions you submit for tailoring.

2. How we use your data

• To authenticate your account and provide access to the service.
• To generate tailored CVs and cover letters (Starter and Pro plans) based on your uploaded resume and job descriptions.
• To store your generated CVs and cover letters so you can access and download them later.
• To track your weekly generation count and enforce usage limits (Free, Starter, and Pro plans).
• To improve and develop the service, including analyzing usage patterns and generating aggregated, anonymized insights.
• To communicate with you about your account, service updates, or changes to these policies.
• To process payments via Stripe (your email and payment details are shared with Stripe for billing purposes).

3. Legal basis for processing

We process your personal data under the following legal bases:

• Contractual necessity: Processing your CV data and account information is necessary to provide the service you signed up for.
• Legitimate interest: We use your data to improve our service, develop new features, generate aggregated analytics, and ensure platform security.
• Consent: By creating an account and uploading content, you consent to the collection and processing of your data as described in this policy.

4. AI processing

Your CV text and job descriptions are sent to Anthropic's API (Claude) to generate tailored CVs and cover letters. Anthropic does not use API inputs to train its models. See Anthropic's privacy policy for details.

5. Data storage and security

Your data is stored on our servers located in North America. Uploaded PDFs and generated CVs are stored as files on disk. Data is stored in its functional form without additional encryption at rest, as we prioritize service reliability and performance. We implement reasonable administrative and technical safeguards to protect your data, but no method of storage or transmission is 100% secure. We do not sell or rent your personal data. We may share data with third parties as required to provide the service (Anthropic for AI processing, Stripe for payment processing) or as required by law.

6. International data transfers

Revorian is operated from Canada. If you access the service from outside Canada, your data will be transferred to and processed in Canada and the United States (for third-party services such as Anthropic and Stripe). By using Revorian, you explicitly consent to this transfer. These countries may not offer the same level of data protection as your home jurisdiction. We rely on your consent and contractual necessity as the legal basis for these transfers.

7. Third-party services

We share your data with the following third-party services as necessary to operate Revorian:

• Anthropic (Claude API): Your CV text and job descriptions are sent for AI processing. Anthropic does not use API inputs to train its models. See Anthropic's privacy policy.
• Stripe: Your email address and payment information are shared for subscription billing. See Stripe's privacy policy.
• Google (OAuth): We receive your name, email, and profile picture when you sign in. See Google's privacy policy.

8. Data retention

Your data is retained as long as your account is active. You can delete individual generated CVs and cover letters at any time from the dashboard. If you want your account and all associated data deleted, contact us at the email below.

9. Data breach notification

In the event of a data breach that affects your personal data, we will notify affected users via email within 72 hours of becoming aware of the breach, where feasible. We will also notify relevant supervisory authorities as required by applicable law.

10. Cookies

We use a session cookie strictly for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics. Because we only use essential cookies required for the service to function, no cookie consent banner is necessary.

11. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data and account.
• Portability: Export your generated CVs as PDFs at any time from the dashboard.
• Withdrawal of consent: You may withdraw consent at any time by deleting your account. This does not affect the lawfulness of processing carried out before withdrawal.
• Objection: Object to processing based on legitimate interest.

For EU/EEA residents (GDPR): You have the rights listed above and may lodge a complaint with your local data protection authority if you believe your rights have been violated.

For California residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell your personal information. To exercise these rights, contact us at the email below.

For Canadian residents (PIPEDA): You have the right to access and challenge the accuracy of your personal information held by us. Contact us to exercise these rights.

12. Contact

For privacy-related questions or data requests, email us at antoine@revorian.com.