Privacy Policy

Last updated: May 18, 2026

Introduction

At CVTone AI ("we", "us", "our"), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our CV builder platform at cvtone.com.

Information We Collect

  • Account information: email address, full name, and authentication data when you register.
  • Resume content: personal details, work experience, education, skills, and other information you enter into your CV.
  • Usage data: pages visited, features used, browser type, and device information for analytics and service improvement.
  • Payment information: processed securely through our payment provider (Tap Payments). We do not store credit card numbers.

How We Use Your Information

  • CV generation and management: to create, store, and export your resumes.
  • Account management: to maintain your account, authenticate access, and manage subscriptions.
  • Service improvement: to analyze usage patterns and improve our platform features.
  • Communication: to send service-related notifications and respond to support requests.
  • AI features: to provide AI-powered CV writing suggestions (Pro plan only). Your data is not used to train AI models.

Data Storage and Security

Your data is stored securely on Supabase (cloud infrastructure) and served through Vercel. Our servers are located in secure data centers. We implement industry-standard security measures including encryption in transit (TLS) and at rest, row-level security policies, and secure authentication protocols.

Saudi Personal Data Protection Law (PDPL)

We comply with the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL). As a data controller, we process your personal data lawfully and transparently. We only collect data necessary for providing our services, and we implement appropriate technical and organizational measures to protect your data.

GDPR Compliance

For users in the European Economic Area, we align our data practices with the General Data Protection Regulation (GDPR). We process data based on your consent and our legitimate interest in providing the service.

Your Rights

  • Access: request a copy of the personal data we hold about you.
  • Correction: request correction of inaccurate or incomplete data.
  • Deletion: request deletion of your personal data. You can delete your account and all associated data from the Account settings page.
  • Data portability: export your CV data in PDF format at any time.
  • Withdraw consent: you may withdraw your consent to data processing at any time by deleting your account.

Privacy Inquiries

For privacy-related questions or to exercise your rights, contact us at privacy@cvtone.com.