Privacy Policy

1. Introduction

patchcv.dev ("we", "us", "our") provides an AI-powered resume optimization service. This Privacy Policy explains what data we collect when you use patchcv.dev, how we use it, and the choices you have.

2. Information We Collect

• Account data: email address, authentication identifiers, and profile metadata you provide.
• Resume & job content: resumes, job descriptions, and any text you submit for analysis.
• Usage data: analyses you run, quota usage, device/browser metadata, and error logs.
• Payment data: handled by our payment processor; we do not store card numbers.

3. How We Use Your Information

• Provide ATS scoring, AI rewriting, keyword analysis, and related features.
• Authenticate users, enforce quotas, and prevent abuse.
• Improve product quality, reliability, and security.
• Send transactional emails (account, billing, security).

4. AI Processing

Resume and job description text you submit is sent to third-party large language model providers solely to generate your analysis. We do not authorize providers to use your content to train their models.

4a. Browser Extension & Job-Search Activity

If you install the Patch CV browser extension, it records activity on job pages you open on LinkedIn, Indeed and Glassdoor: the job title, company, location, a one-way hash of the job URL, how long the page was actively visible, and whether you saved, analysed, skipped or applied to the role. This is on by default and is explained to you the first time the extension panel opens; you can switch it off at any moment in the extension or on your Insights page.

We do not record keystrokes, form contents, page HTML, or any browsing outside job pages on those three sites. The data is used only to improve your matches, coaching and knowledge base — never sold or shared for advertising. Raw activity is kept for 365 days by default and summarised into daily statistics; you can export or permanently delete all of it from your Insights page, and turning tracking off deletes it immediately.

4b. Advertising

We show a small number of ads on our public pages (the blog and FAQ), served by Google AdSense, to help keep Patch CV free. Google may use cookies and device identifiers to measure ad views and, where you accept, to personalise the ads you see. In regions that require consent, we ask before any personalisation; if you reject, or your choice is not known, only non-personalised ads are shown. You can change your choice at any time via the "Cookie settings" link in the footer. See Google's partner-sites policy for how Google uses data from sites that use its services.

5. Data Sharing

We do not sell your personal data. We share data only with infrastructure subprocessors (hosting, database, email, AI inference, payments, advertising) under contractual confidentiality, or when required by law.

6. Data Retention

Account data is retained while your account is active. Analyses are retained until you delete them or close your account. Backups may persist for a limited rolling window.

7. Your Rights

You may access, export, correct, or delete your data at any time from your account, or by emailing us. Depending on your region, you may have additional rights under GDPR, UK GDPR, or CCPA.

8. Security

We use encryption in transit, row-level database access controls, and least-privilege server credentials. No system is perfectly secure; please use a strong, unique password.

9. Children

patchcv.dev is not directed to children under 16 and we do not knowingly collect their data.

10. Changes

We may update this policy. Material changes will be announced via the app or email.

11. Contact

Questions? Email privacy@patchcv.dev.