Privacy Policy
Last updated: March 2026
1. Information We Collect
We collect the following types of information:
- Account data: Name, email address, and password when you register
- Resume content: Information you enter into your resumes (when using Cloud Sync mode)
- Usage data: How you interact with our Service (pages visited, features used)
- Payment data: Processed securely by Stripe; we do not store card details
2. How We Use Your Information
- To provide and maintain the Service
- To process your transactions
- To improve our Service and develop new features
- To communicate with you about your account
- To detect and prevent fraud or abuse
3. Data Storage & Your Privacy Choice
CraftCV offers two storage modes, giving you full control over where your data lives:
- ☁️ Cloud Sync (default): Your resume data is stored securely using Supabase (hosted on AWS). We use industry-standard encryption for data in transit (TLS) and at rest. This enables cross-device access and auto-save.
- 💾 Local-Only Mode: When you choose Local-Only mode, your resume data is stored exclusively in your browser's local storage. No resume content is transmitted to or stored on our servers. Your data never leaves your device. Please note that clearing your browser data will permanently delete locally stored resumes.
You can switch between modes at any time from the resume builder toolbar. When switching from Local to Cloud, your data will be synced to our servers. When switching from Cloud to Local, your data will be removed from our servers on your next save.
4. Data Sharing
We do not sell your personal data. We may share data with:
- Supabase: Database and authentication provider (Cloud Sync mode only)
- Stripe: Payment processing
- Vercel: Hosting provider
5. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and all associated data
- Export your resume data
- Choose Local-Only mode to keep data exclusively on your device
- Opt out of non-essential communications
6. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.
7. Children's Privacy
Our Service is not intended for children under 13. We do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.
9. Contact
For privacy-related inquiries, contact us at support@vtxlabs.app.