Legal Document

Privacy Policy

πŸ“… Effective: April 3, 2026πŸ”„ Last Updated: April 10, 2026🌐 claricv.vercel.app
β„Ή Your Privacy MattersThis Privacy Policy explains how ClariCV (β€œwe”, β€œus”, β€œour”) collects, uses, stores, and protects your personal information when you use our platform. We are committed to transparency. Please read this policy carefully alongside our Terms of Service and Cookie Policy.
1

Introduction & Scope

This policy applies to all personal data processed by ClariCV when you:

  • Visit, register for, or use the ClariCV platform at claricv.vercel.app;
  • Upload or enter CV, resume, or personal information into any ClariCV feature;
  • Use any AI-powered feature (JD matching, CV rewriting, ATS scoring, bullet enhancement);
  • Communicate with us via email or any support channel.

We process your personal data on the following legal bases: contract performance (to provide the Service you registered for), legitimate interests (to maintain platform security, prevent abuse, fix bugs, and improve reliability), and legal obligations (where applicable). Your use of the platform is subject to this policy. Where we rely on consent as a legal basis, we will seek it explicitly.

2

Data Controller

ClariCV operates as the data controller for personal information you submit directly to our platform. For data transmitted to any Third-Party AI Provider β€” whether accessed directly or via an intermediary routing service β€” and infrastructure providers (Supabase, Vercel), those parties act as independent data controllers or processors under their own terms. The specific AI providers ClariCV uses may change at any time; see Section 5 for the current list of known providers.

For EU/EEA users: based on our current scale and processing profile, ClariCV believes it is currently exempt from appointing an EU representative under GDPR Article 27. We will cooperate with EU supervisory authorities on request and will appoint an EU representative if this exemption no longer applies.

3

Information We Collect

3.1 Account Information

When you create an account, we collect:

  • Email address β€” used for authentication and account management;
  • Name β€” if provided during sign-up or via Google OAuth;
  • Profile picture URL β€” if you sign in via Google OAuth (sourced from your Google profile);
  • Authentication tokens β€” session tokens managed by Supabase for secure login.

3.2 CV & Professional Content

When you use ClariCV's core features, we collect and store:

  • All CV content you enter into the CV Builder (name, contact details, work history, education, skills, certifications);
  • CV documents you upload for ATS checking or parsing;
  • Job descriptions you paste into the JD Matcher;
  • AI-generated outputs produced during your session (rewritten bullets, ATS analysis, match scores);
  • Job applications and tracking data you enter into the Job Tracker.
⚠Important β€” CV Data Contains Sensitive Personal Information
Your CV may contain highly sensitive personal data including full name, contact details, home address, employment history, and qualifications. This data is transmitted to Third-Party AI Providers when you use AI features. Please review Section 5 carefully before submitting sensitive information.

3.3 Usage & Technical Data

We and our infrastructure providers automatically collect:

  • IP address and approximate geographic location;
  • Browser type and version, operating system;
  • Pages visited, features used, and time spent on the platform;
  • Error logs and diagnostic information to improve platform stability;
  • Session and authentication cookies (see our Cookie Policy).
4

How We Use Your Information

We use your information for the following purposes:

PurposeData UsedLegal Basis
Provide and operate the ServiceAccount info, CV contentContract performance
Authentication & account securityEmail, session tokensContract / Legitimate interest
AI feature processing (CV rewrite, JD match, ATS)CV text, job descriptionsContract performance
Improve platform reliabilityError logs, usage dataLegitimate interest
Respond to support requestsEmail, account infoLegitimate interest
Enforce our Terms of ServiceAccount info, usage logsLegal obligation / Legitimate interest
Send critical service notificationsEmail addressContract / Legal obligation
βœ“We Do Not Sell Your Data
ClariCV does not sell, rent, or trade your personal information or CV content to recruiters, employers, data brokers, or any third party for commercial purposes. Your data is used solely to operate and improve the Service.
5

Third-Party AI Providers & Data Transmission

⚠Critical β€” CV Content Is Sent to External AI Providers
When you use any AI-powered feature on ClariCV (CV rewriting, JD matching, ATS scoring, bullet enhancement), your CV text and job description are transmitted to one or more external Third-Party AI Providers. These providers may be accessed directly or via an intermediary routing service. This processing is necessary to deliver the AI feature you request.

ClariCV may use any AI provider or model at any time, accessed either directly or via a routing intermediary. The specific provider and model used for any given request may change without notice. Known current and anticipated providers include, but are not limited to:

If you object to this processing, you can stop using AI features and continue using non-AI parts of the platform. To ask which providers are currently active, or to submit an objection, contact admin@seismopilot.com.

⚑Free Tier β€” Possible AI Training by Third Parties
On the Free Tier, ClariCV uses publicly available or free-access AI models. These models may, under their own provider terms, log, retain, or use your submitted data for AI training and safety evaluation. ClariCV has no control over these practices. Upgrade to the Pro Tier for access to commercial-grade API tiers, which typically carry stricter data-use restrictions β€” though even then, we cannot guarantee third-party data handling.
⚑Third-Party Erasure Requests
Once your data has been transmitted to any Third-Party AI Provider, ClariCV cannot recall, delete, or modify it on their systems. Erasure requests for data held by any provider must be submitted directly to that provider under their own privacy policy.

ClariCV does not share your data with any provider for any purpose other than generating the AI output you requested. We do not use your CV data for our own AI model training.

6

Infrastructure & Service Providers

ClariCV relies on the following infrastructure providers to operate the platform. These providers may process your data as part of service delivery:

SupabaseDatabase, authentication, and file storage

Stores your account data, CV content, and session tokens. Supabase is SOC 2 Type II certified and stores data on AWS infrastructure.

Privacy Policy β†’
VercelHosting and edge deployment

Hosts the ClariCV web application and processes server-side requests. Vercel may collect server access logs including IP addresses.

Privacy Policy β†’
7

Data Retention

We retain your data for as long as your account is active and as needed to provide the Service:

  • Account data β€” retained until you delete your account;
  • CV content and documents β€” retained until you delete them or your account is closed;
  • Usage and diagnostic logs β€” typically retained for 30–90 days for operational purposes;
  • AI output β€” not permanently stored by ClariCV beyond what you save to your account;
  • Free Tier data β€” inactive Free Tier accounts may be purged after 12 months of inactivity, with 30 days' email notice where possible.
β„ΉAccount Deletion
You can request deletion of your account and all associated data at any time via your account settings or by emailing admin@seismopilot.com. Deletion requests are processed within 30 days. Note that Third-Party AI Providers' retention of any data they have received is governed by their own policies.
8

Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data. We will endeavour to honour all valid requests within 30 days:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your account and associated data.

Right to Portability

Receive your CV data in a structured, machine-readable format.

Right to Restrict Processing

Ask us to pause processing of your data in certain circumstances.

Right to Object

Object to processing based on legitimate interests, including optional processing where applicable.

⚑Limitation β€” Third-Party AI Providers
Once your data has been transmitted to any Third-Party AI Provider, ClariCV cannot recall, delete, or modify that data on their systems. Any erasure requests regarding data held by any AI provider ClariCV has used β€” whether listed in Section 5 or not β€” must be submitted directly to that provider under their own privacy policy.

To exercise any right, email us at admin@seismopilot.com. We may need to verify your identity before processing a request.

9

Data Security

We implement reasonable technical and organisational measures to protect your data, including:

  • HTTPS/TLS encryption for all data in transit;
  • Row-level security (RLS) policies in Supabase to isolate user data;
  • Secure session token management via Supabase Auth;
  • API keys stored as environment variables, never exposed client-side;
  • Access controls restricting data to authenticated account holders.
⚠No Absolute Security Guarantee
No security system is impenetrable. ClariCV cannot guarantee the absolute security of your data. In the event of a data breach affecting your personal information, we will notify affected users in accordance with applicable legal requirements. Security incidents originating from Third-Party AI Providers are outside our control.
10

Children's Privacy

ClariCV is not directed at or intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe a minor has provided us with personal information, please contact us at admin@seismopilot.com and we will take steps to delete such information promptly.

11

International Data Transfers

ClariCV is a globally accessible platform. Your personal data may be processed and stored in countries outside your own, including the United States, where Supabase, Vercel, Google, and OpenAI operate infrastructure. These countries may have different data protection laws than your jurisdiction.

β„ΉCross-Border Transfers
Where required, ClariCV relies on Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms for restricted international data transfers. AI requests may be routed to servers in the United States or any other jurisdiction where the AI provider ClariCV uses at that time operates infrastructure β€” this jurisdiction may vary as ClariCV changes providers or models. Documentation for known current providers: Supabase DPA, Vercel DPA, OpenRouter Privacy, OpenAI DPA, Anthropic Privacy, Google GDPR. For any additional providers ClariCV uses, please consult the provider list in Section 5 and each provider's own privacy terms. You may contact us to ask about current provider jurisdictions.
12

Cookies & Tracking Technologies

ClariCV uses a limited set of cookies and similar technologies. Essential cookies are required for authentication and secure session management. We do not use advertising or cross-site tracking cookies.

For full details on the cookies we use, how to control them, and your opt-out options, please read our dedicated Cookie Policy β†’

13

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the β€œLast Updated” date at the top of this page. For significant changes, we will endeavour to notify registered users by email or via an in-app notice. Continued use of ClariCV is subject to the updated policy; where consent is legally required for a change, we will request it explicitly before applying that change.

We encourage you to review this policy periodically. The most current version is always available at claricv.vercel.app/privacy.

14

Contact Us

For any privacy-related questions, data access requests, erasure requests, or concerns, please contact us:

We aim to respond to privacy enquiries within 10 business days.

Β© 2026 ClariCV. All rights reserved.
This document was last updated on April 10, 2026.
By continuing to use ClariCV, you acknowledge that you have read and understood this document.