Skip to main content

Privacy Policy

Last updated: October 11, 2026

This Privacy Policy explains how CVitae Studio (“CVitae Studio,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our website and résumé-building service (the “Service”). By creating an account or otherwise using the Service, you agree to the collection and use of information as described here.

1. Information We Collect

Account information. We do not support password-based accounts. When you sign in with Google or GitHub, we receive your name, email address, and profile picture from that provider.

Résumé and career data. Information you enter or upload while building a résumé - including your name, contact details, work history, education, skills, certifications, awards, publications, volunteer experience, languages, interests, projects, and any cover letter text - along with your chosen template and design settings.

Job application data. If you use the application tracker, we store the companies, roles, statuses, and any custom fields you create, along with a log of changes made to each application (for your own reference).

Uploaded files. If you upload an existing résumé (PDF or DOCX) to import it, the file is parsed to extract its text in order to prefill your résumé. The uploaded file itself is processed in memory and is not stored - only the résumé data you subsequently save is retained.

Job posting text. If you paste a job description into the ATS scoring or cover letter tools, that text is processed to generate your results (see Section 3). The text itself is held only in your browser session and is not saved to our database. So that checking the same job again gives the same score, we keep the list of keywords found in it, filed under a one-way fingerprint of the text, for 30 days. It is included in your data export and deleted with your account.

2. How We Use Your Information

We use the information above to:

  • Provide, maintain, and operate the résumé-building and application-tracking features of the Service;
  • Generate AI-assisted writing suggestions, ATS compatibility scores, keyword matching, and cover letters (see Section 3 below);
  • Authenticate you and keep your account secure;
  • Respond to support requests you send us; and
  • Diagnose and fix technical problems with the Service.

We do not use your résumé or application data for advertising, and we do not sell your personal information to anyone.

3. AI-Assisted Features

Certain features - writing suggestions, ATS scoring and keyword matching, ATS-format rewrites, and cover letter generation - send the relevant text of your résumé and, where applicable, any job description you paste in (not the raw uploaded file) to Anthropic's Claude API for processing. Anthropic processes this text solely to generate the requested output and according to its own terms. AI-generated suggestions are shown to you for review, and - where the system flags a claim it cannot verify against your original text - for your explicit approval, before anything is saved to your résumé.

4. How We Share Your Information

We do not sell your personal information. We share information only with the service providers who help us operate the Service, each acting on our behalf and only to the extent needed to provide their part of it:

  • Google and GitHub - for authentication (OAuth sign-in);
  • Anthropic - to power AI-assisted writing, scoring, and extraction features (Section 3);
  • MongoDB, Inc. (MongoDB Atlas) - to store your account and résumé data in our database; and
  • Vercel, Inc. - to host and serve the application.

We do not use any advertising, analytics, or tracking services - the Service does not include any third-party analytics or tracking scripts. We may also disclose information if required to do so by law, or to protect the rights, property, or safety of CVitae Studio, our users, or others.

5. Cookies & Local Storage

We use only the cookies necessary to keep you signed in: a session cookie set by our authentication system, and short-lived cookies used during the Google/GitHub sign-in process itself. We do not use advertising or cross-site tracking cookies. We also store display preferences - such as your chosen application board view and preview zoom level - locally in your browser; this data never leaves your device.

6. Data Retention & Deletion

We retain your account, résumé, and application data for as long as your account exists, so that the Service remains available to you. You can permanently delete an individual résumé or job application at any time from your dashboard; deleting a job application also deletes its associated activity log. You can also delete your entire account and all associated data yourself, immediately, from your account settings. If you would rather we did it for you, contact us at idan.rbel@gmail.com.

7. Your Privacy Rights

Subject to applicable law, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, and object to certain processing. You can exercise these rights directly within the Service: download a complete copy of your data, or delete your account outright, from your account settings, and edit or delete individual résumés and applications from your dashboard. For anything else, contact us at idan.rbel@gmail.com.

8. Data Security

We do not store passwords - sign-in is handled entirely through Google and GitHub's own OAuth systems. Data is transmitted over encrypted (HTTPS) connections, and we apply reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Our service providers (including Anthropic, MongoDB Atlas, and Vercel) may process and store data on servers located outside of your country of residence, including outside of Israel. By using the Service, you consent to this transfer, storage, and processing of your information.

10. Children's Privacy

The Service is not directed to, and is not intended for use by, individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

11. Governing Law

This Privacy Policy is governed by the laws of the State of Israel, including the Protection of Privacy Law, 5741-1981, and its regulations and amendments, without regard to conflict-of-law principles.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above. Your continued use of the Service after a change becomes effective constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at idan.rbel@gmail.com.