Privacy Policy

1. Data We Collect

A. Information You Provide

• Email address
• User-generated content (e.g., CV data, inputs to the service)
• Communication data (if you contact us)

B. Automatically Collected Data

• Device and browser information
• IP address (where applicable)
• Usage data (pages visited, interactions, session behavior)
• Referrer and traffic source data

2. How We Use Data

• To provide and operate the service
• To process and generate outputs based on user input
• To improve performance and user experience
• To maintain security and prevent abuse
• To communicate with users
• With your optional consent, we email you CVZilla offers, promotions and product updates. You can withdraw consent at any time in account settings or using the unsubscribe link in each marketing email. This does not affect account and security emails. We record your choice, its date, source, language and the consent notice for accountability.

3. Analytics and Tracking

We use analytics tools such as Mixpanel and Google Analytics (GA4) to understand how users interact with our service.

These tools collect aggregated and technical information such as usage patterns, navigation behavior, and device information.

We do not send personally identifiable information (such as email addresses or user names) to analytics systems.

4. Third-Party Service Providers

We rely on trusted third-party providers to operate and improve our service:

• OpenAI - used to process user inputs and generate outputs
• Mixpanel - product analytics
• Google Analytics (GA4) - website analytics
• LinkedIn - advertising measurement on all frontend pages, with an additional request when your email is verified or you create a new CVZilla account using Google, subject to our analytics consent settings. The LinkedIn Insight JavaScript tag may collect page URLs, referrers, IP address, browser and device information, timestamps and page interactions, and may use LinkedIn cookies. Our registration event does not explicitly send your email, user ID or resume. The vendor script runs in the page context. An image fallback is used when JavaScript is disabled.
• Telegram - communication and support (if used)

These providers process data in accordance with their own privacy policies and may act as data processors or independent controllers depending on the context.

5. Legal Basis for Processing

• Performance of a contract (providing the service)
• Legitimate interests (service improvement, security)
• Consent (where required, e.g., analytics cookies)

6. Data Retention

We retain personal data only for as long as necessary to provide the service and fulfill legal obligations. Analytics data is retained in aggregated form where possible.

7. International Data Transfers

Your data may be processed in the European Union and, where necessary, in other jurisdictions. We take reasonable steps to ensure appropriate safeguards in accordance with applicable data protection laws.

8. Your Rights

Depending on your location, you may have rights including access, correction, deletion, restriction of processing, and withdrawal of consent.

To exercise your rights, contact us at team@cvzilla.io .

9. Data Security

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last Updated" date above.

11. Contact

For any privacy-related questions, contact us at team@cvzilla.io .