Privacy Policy

This Privacy Policy explains what personal information CVMagnet (“we”, “us”) collects, how we use and share it, and the choices you have. CVMagnet is a United States–based software service that tailors your resume to a job description. We collect only what we need to run the service, and we do not sell your personal information.

We collect the following, most of which you provide or generate by using CVMagnet:

• Account information — your email address, provided through our authentication provider, Clerk, when you sign up.
• Resume content — the text extracted from resumes you upload, along with the file name and size. We do not keep the uploaded file itself (see below).
• Job descriptions — the job-posting text you paste in to match against.
• Generated documents — the tailored resumes and cover letters we produce for you.
• Settings and usage — your template and formatting preferences, and usage counts used to enforce plan limits.
• Analytics and device data — with your consent, standard analytics data (such as pages visited, approximate location, and device and browser type) collected through cookies to measure site traffic and advertising performance.

We do not store your uploaded files. When you upload a resume, we extract its text and then discard the original file immediately — there is no file or blob storage. Only the extracted text and basic metadata (file name and size) are retained.

• To provide the service — analyze your resume against a job description, score the match, and generate tailored documents.
• To operate your account, enforce plan limits, and provide support.
• To sell and process paid plans through our Merchant of Record, and to keep the invoice and tax records required by law.
• To measure site traffic and the performance of our advertising, with your consent.
• To maintain security and prevent abuse of the service.

We share personal information only with the providers we rely on to run CVMagnet, and only as needed for them to perform their function:

• Clerk — authentication and account management (stores your login and email).
• Neon — our database host, where your resume text, job descriptions, generated documents, and settings are stored.
• Anthropic — our AI provider. Your resume text and job-description text are sent to Anthropic’s Claude API to perform the analysis and generate documents. Anthropic processes this data to provide its API and does not use API inputs to train its models.
• Stripe and Link — our payment provider and Merchant of Record. Card details are entered on Link's checkout page and never reach our servers. Link is the seller for your subscription: it holds your billing name, address and payment method, issues your receipts and invoices, and provides support for payment and subscription questions.
• Google — analytics and advertising measurement (Google Analytics and Google Ads). With your consent, Google sets cookies to help us understand site traffic and measure the performance of our own ad campaigns.

We do not sell your personal information, and we do not send you recruiter spam. The Google advertising tools above are used only to measure the performance of our own ads, not to let others advertise to you, and only after you consent.

We keep your data for as long as your account is active. You can delete all of your data at any time from Settings using the “Delete my data” control, which permanently removes your resumes, job descriptions, matches, and generated documents from our database. Note that this deletes your content but leaves your sign-in intact; to remove your login as well, delete your account.

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, and to know how it is used. You can exercise most of these rights directly through your account, or by contacting us. We will not discriminate against you for exercising your rights.

We use cookies that are necessary to keep you signed in and to operate the service securely, set through our authentication provider.

With your consent, we also use Google Analytics and Google Ads cookies to measure site traffic and the performance of our advertising. Where consent is required, these analytics and advertising cookies stay disabled until you accept them through our cookie banner, and you can decline them at any time. We do not use them to sell your personal information.

We use industry-standard measures to protect your information, including access controls and encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

CVMagnet is not intended for anyone under 18, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected here before they take effect.

Questions about your privacy or this policy? Reach us through our contact form. See also our Terms of Service.