This Privacy Policy explains how Cursivo ("Cursivo", "we", "us", or "our") collects, uses, stores, and protects information when you use our resume-building application, including the website, editor, and related services (collectively, the "Service"). By creating an account or using the Service, you agree to the practices described here.
1. Information we collect
We collect the following categories of information:
Account information — name, email address, and authentication identifiers when you register via email/password, Google Sign-In, or LinkedIn Sign-In.
Resume content — the information you enter into the editor, including personal details (name, contact information, photo if added), education, work experience, skills, projects, certifications, and any other content you choose to include in your CV.
Uploaded files — resumes or documents you upload for parsing/import (PDF, DOC, DOCX, TXT), and JSON backup/restore files.
AI feature inputs — text you submit to AI tools (e.g. bullet rewriting, ATS scoring, cover letter generation) and the responses returned.
API keys (optional) — if you choose to connect your own AI provider key (e.g. OpenAI, Groq, or similar), it is stored so the Service can make requests on your behalf.
Usage & credits data — AI feature usage counts, credit balances, plan tier, and activity logs (e.g. exports, sign-ins) used for account administration and abuse prevention.
Technical data — device/browser type, IP address, and basic diagnostic information collected automatically for security and reliability.
2. How we use your information
To provide, operate, and maintain the resume editor, templates, and export features (PDF/Word).
To run AI-powered features (resume scoring against ATS systems, bullet rewriting, content suggestions) by sending the relevant portions of your resume content to our configured AI providers (or your own connected provider, if applicable).
To authenticate you and keep your account secure (email verification, password reset, sign-in via Google/LinkedIn).
To track AI credit usage and enforce plan limits.
To send essential account and service-related communications (e.g. verification emails, security notices, product updates).
To detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service.
To improve and develop the Service, including troubleshooting and analytics on an aggregated basis.
3. AI processing & third-party providers
Certain features (resume scoring, bullet rewriting, AI chat assistance, cover-letter drafting) work by sending relevant text from your resume to third-party large-language-model providers (which may include OpenAI, Groq, or other providers configurable in the app) for processing. This data is sent solely to generate the requested output and is subject to that provider's own data-handling terms. We do not control, and are not responsible for, how third-party AI providers process data once it leaves our systems, beyond the configuration we apply (e.g. not using your data to train our own models).
If you supply your own API key for a provider, requests made using that key are sent directly under your provider account and subject to that provider's terms.
Sign-in providers
We support sign-in via Google and LinkedIn. When you use these options, the provider shares basic profile information (name, email, profile photo) with us as permitted by your settings with that provider. We do not receive your password for these providers.
4. Data storage
Your account data and resume content are stored using Google Firebase (Authentication and Firestore database). Data is stored on Firebase's cloud infrastructure and protected using Firebase's security rules, which restrict access to your own account data.
Locally, the app may also store preferences and session information in your browser's local storage to improve performance (e.g. remembering your last open section, dark-mode preference, or editor layout).
5. Data sharing
We do not sell your personal information. We share data only:
With service providers that operate the Service on our behalf (e.g. Firebase/Google Cloud for hosting and database, AI providers for processing AI requests as described above, email-delivery services for verification/notification emails).
When you explicitly choose to share or export your resume (e.g. via a shareable link, or downloading a PDF/Word file).
If required to comply with a legal obligation, enforce our Terms of Service, or protect the rights, property, or safety of Cursivo, our users, or others.
6. Shared resume links
If you use a "share" feature to generate a link to your resume, anyone with that link may be able to view the shared content. You are responsible for managing and revoking shared links containing personal information.
7. Data retention
We retain your account and resume data for as long as your account is active. If you delete your account, your profile and resume data are removed from our active systems, except where retention is required for legal, security, or fraud-prevention purposes (e.g. activity logs may be retained for a limited period).
8. Your rights & choices
Access & export — you can export your resume data at any time as PDF, Word, or a JSON backup from within the editor.
Correction — you can edit your profile and resume content directly in the app.
Deletion — you can request deletion of your account and associated data via the account settings or by contacting us at the address below.
Email verification & communications — you can manage notification preferences where available; essential security emails cannot be disabled.
9. Children's privacy
The Service is intended for users who are at least 16 years old (or the age of legal majority in your jurisdiction, if higher). We do not knowingly collect personal information from children below this age.
10. Security
We use industry-standard measures — including authentication via Firebase, encrypted connections (HTTPS), and access-controlled databases — to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. International data transfers
Our infrastructure providers (Google Firebase/Cloud and AI providers) may process and store data in countries other than your own. By using the Service, you consent to the transfer of your information to such locations, which may have different data protection laws than your jurisdiction.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
13. Contact us
If you have questions about this Privacy Policy or wish to exercise any of your rights, contact us at support@cursivo.in.