Privacy Policy

1. Introduction

Welcome to Veritas CV ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our Harvard-style resume builder service.

This Privacy Policy explains how we collect, use, and protect your information when you use our website at veritascv.xyz (the "Service").

2. Information We Collect

2.1 Information You Provide

Account Information: When you sign in using Google OAuth, we collect your email address, name, and profile picture. This information is stored securely in our database and is used solely to provide you with access to the Service and to manage your account.

Resume Data: When you create or edit resumes, this information is stored in our secure database so you can access it across devices and sessions. Your resume data is encrypted and accessible only to you through your authenticated account.

Payment Information: When you make a purchase, payment processing is handled entirely by Stripe. We do not store or have access to your full credit card details. We only receive confirmation of successful payments, subscription status, and basic transaction information necessary to provide you with access to paid features.

2.2 Automatically Collected Information

We use Vercel Analytics to collect anonymous usage data such as page views, browser type, and general geographic location. This helps us improve the Service. No personally identifiable information is collected through analytics.

We may track usage metrics such as download counts and feature usage to improve our Service and understand user preferences. This data is anonymized and cannot be used to identify you personally.

3. How We Use Your Information

• —To provide and maintain the Service, including storing your resumes and subscription data
• —To process your payments securely through Stripe
• —To manage your subscription and provide access to paid features
• —To authenticate your identity when you sign in
• —To improve and optimize the user experience
• —To communicate with you about your account, purchases, or subscription if necessary
• —To comply with legal obligations

4. Data Storage and Security

Secure Database Storage: Your account information and resume data are stored in our secure database provided by Supabase. All data is encrypted at rest and in transit using industry-standard encryption protocols.

Row-Level Security: We implement Row-Level Security (RLS) policies to ensure that you can only access your own data. Each user's data is isolated and protected at the database level.

Secure Authentication: User authentication is handled through Supabase using industry-standard OAuth 2.0 protocols. Your passwords are never stored on our servers.

Secure Payments: All payment transactions are processed through Stripe, which uses industry-standard encryption and security measures (PCI DSS Level 1 compliant).

Data Backup: Your data is automatically backed up to prevent data loss. However, we recommend that you export your resumes periodically for your own records.

5. Third-Party Services

We use the following third-party services:

• —Supabase: For user authentication (Google OAuth) and secure database storage. See Supabase's Privacy Policy.
• —Stripe: For secure payment processing. See Stripe's Privacy Policy.
• —Google: For OAuth authentication. See Google's Privacy Policy.
• —Vercel: For hosting and analytics. See Vercel's Privacy Policy.

6. Your Rights

You have the right to:

• —Access your account data by signing in and viewing your dashboard
• —Delete your resumes at any time through the resume management interface
• —Delete your account and all associated data by contacting us
• —Export your resume data in PDF format
• —Cancel your subscription at any time through the Stripe Customer Portal
• —Request information about what data we have stored about you

7. Cookies and Local Storage

We use essential cookies required for the Service to function properly, including session cookies for authentication and security. We also use analytics cookies through Vercel Analytics to understand how users interact with our Service. These cookies do not contain personally identifiable information.

We may use local storage in your browser to temporarily store user preferences and improve the user experience. This data is stored locally on your device and does not contain sensitive information.

8. Data Retention

We retain your account information and resume data for as long as your account is active. If you delete your account, we will delete your personal information and resume data within 30 days, except where we are required to retain certain information for legal or compliance purposes.

Payment and subscription records are retained in accordance with legal and tax requirements, typically for a period of 7 years after the end of the tax year in which the transaction occurred.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and stored on servers located outside of your country of residence. By using our Service, you consent to the transfer of your information to facilities located in the United States and other countries where our third-party service providers operate. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.