Privacy Policy

1. Who is responsible

CVScriba is run from Ottawa, Ontario. The person in charge of protecting personal information is the founder of CVScriba, reachable at support@cvscriba.com. Write to that address for any question, request or complaint about your information.

2. What we collect

Your name and email, from the Google or Microsoft account you sign in with (we never see your password). If you try CVScriba without an account, there is no name or email: the application you make is kept under a random ID held in your browser's cookie, and your CV is not saved for next time. The CV you give us (a file or pasted text) and the job postings you add. What we write for you: tailored CVs, cover letters and the notes that explain them. What you add yourself: statuses, notes and applications you log. If you buy a plan: your plan and its dates. Stripe handles the payment; we never see your card number. If you share a story (one sentence about your search), we keep it with the first name, program and school you give; it appears on cvscriba.com only if you tick the box. Technical logs (time of a request, IP address, errors) kept for a short time to keep the service running.

3. Why we use it

To write and store your applications, to keep your CV ready for the next posting, to run your account and your plan, to answer you when you write to us, and to fix what breaks. We do not sell your information, we do not use it for advertising, and nobody at CVScriba reads your CV unless you ask us for help with it.

4. AI processing

To write your documents, we send the text of your CV and of the job posting to Google's Gemini API, our AI provider. We send only that text, not your email or your account. Google processes it under its terms for paid Gemini API services. Read what we write before you send it: the AI can make mistakes, and the checklist on each application shows what to verify.

5. Where your information is kept

Our providers store and process data outside Québec and outside Canada, mainly in the United States: Render (hosting), Neon (database), Google (AI and Google sign-in), Microsoft (Microsoft sign-in) and Stripe (payments). Each one processes your information only to provide its service to us, under its own security commitments. Data sent outside Québec may be subject to the laws of the country where it is held.

6. Cookies

We use two cookies that the site needs: one keeps you signed in, or keeps your work if you try without an account (30 days), and one remembers your language (1 year). Inside an app's browser (TikTok, Instagram), two more last under an hour: they remember that the page already offered to open in your browser. Visit statistics are off unless you say yes on the notice at the bottom of the screen, and you can change your mind at any time by clearing the site's cookies.

7. How long we keep it

Your account and applications: as long as your account exists. An application made without an account: until you delete it (on its page), or until you sign in and it moves into your account. Delete an application and its files are removed right away. Your saved CV: until you delete it (Settings, then Delete my saved CV) or your account. Ask us to delete your account and we delete everything within 30 days. Payment records are kept by Stripe for as long as tax law requires.

8. Your rights

You can ask to see the information we hold about you, to correct it, to get a copy in a common format, to delete it, or to withdraw your consent. Write to support@cvscriba.com and we answer within 30 days. If you are not satisfied, you can complain to the Commission d'accès à l'information du Québec or to the Office of the Privacy Commissioner of Canada.

9. Security

Connections are encrypted (HTTPS), sign-in goes through Google or Microsoft, each account sees only its own applications, and access to our systems is limited to the people who run CVScriba. If an incident put your information at risk, we would tell you and the authorities as the law requires.

10. Changes

If we change this policy, we update the date at the top. If a change affects how we use the information you already gave us, we tell you before it applies.

Email support@cvscriba.com for product questions, billing, or account help.