This Privacy Policy explains how ImportedCV(importedcv.com) ("ImportedCV", "we", "us", "our") collects, uses, shares, and protects your personal information when you use our website and AI-powered resume services (the "Service"). By using the Service, you agree to the practices described below.
1. Who We Are
- Platform: ImportedCV — AI ATS resume scoring & builder (Digital SaaS)
- Website: https://importedcv.com
- Data & privacy contact: support@importedcv.com
2. Information We Collect
- Account data: email address, password hash, authentication identifiers, and optional profile fields such as name and phone number.
- Resume & job content: resumes you upload, job descriptions you paste, and AI-generated scores and optimized output.
- Payment metadata: Razorpay order ID, payment ID, amount, currency, and transaction status. We do not collect or store full card numbers, CVV, UPI PINs, or net-banking credentials — these are handled exclusively by Razorpay.
- Usage data: pages visited, scans performed, feature usage, device type, browser, and approximate region — used for product analytics and abuse detection.
- Support communications: messages you send via the Contact form or to support@importedcv.com.
3. How We Use Your Information
- To deliver the Service — run ATS analyses, generate optimized resumes, and provide downloads.
- To process payments and grant credits/entitlements to your account.
- To send transactional emails (account verification, payment receipts, credit unlock confirmations).
- To provide customer support and respond to enquiries.
- To monitor, debug, and improve the Service, and to detect fraud, abuse, or violations of our Terms.
- To comply with legal obligations and respond to lawful requests.
4. Legal Bases for Processing
We process your data under the lawful bases of (a) performance of a contract with you, (b) your consent (e.g., for optional communications), (c) our legitimate interests (product improvement, fraud prevention), and (d) compliance with legal obligations.
5. Sub-processors & Sharing
We do not sell your personal data. We share the minimum necessary data with trusted sub-processors strictly to deliver the Service:
- Payments: Razorpay Software Pvt. Ltd. (India) — payment processing.
- AI processing: OpenAI and Google (Gemini) — to generate ATS scores and rewritten resume content.
- Hosting & database: managed cloud infrastructure providers used to store accounts, resumes, and entitlements.
- Email delivery: transactional email providers for sending account and payment-related emails.
We may also disclose information when required by law, court order, or government request, or to protect the rights, property, or safety of ImportedCV, our users, or others.
6. Data Storage & Security
Data is stored on managed cloud infrastructure with Row-Level Security policies that restrict each record to its owning account. All traffic is encrypted in transit using HTTPS/TLS. Secret keys are stored as managed server-side secrets and are never embedded in client code. Access to production data is limited to authorized personnel on a need-to-know basis.
7. Data Retention
- Account data, resume content, and entitlements are retained for as long as your account remains active.
- Payment and transaction records are retained for the period required by applicable tax and accounting laws.
- You may request deletion of your account and associated data at any time (see Section 9).
8. AI Processing Notice
Resume content and job descriptions you submit are transmitted to third-party AI providers (OpenAI, Google) to generate ATS scores and rewritten output. We do not authorize these providers to use your content to train their public models. AI-generated results may vary and are not guaranteed to be accurate or complete.
9. Your Rights
Subject to applicable law (including the Indian DPDP Act, 2023 and the EU/UK GDPR where relevant), you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data ("right to erasure").
- Withdraw consent or object to certain processing.
- Request a copy of your data in a portable format.
To exercise any of these rights, email support@importedcv.com. We respond to verified requests within 30 days.
10. Cookies & Local Storage
We use strictly functional cookies and browser local storage for authentication, session continuity, and remembering preferences. We do not use third-party advertising or cross-site tracking cookies.
11. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us so we can delete it.
12. International Transfers
Your data may be processed in countries other than your own, including by our sub-processors located outside India. Where required, we rely on appropriate safeguards for such transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance.
14. Contact
For privacy questions or data requests, contact support@importedcv.com or use the Contact Us page.