Privacy Policy.
Your career documents are deeply personal. We treat your resumes, metrics, and employment history with strict confidentiality and bank-grade privacy standards.
Effective Date: October 20, 2026
No Model Training
Your resume bullets and personal records are never used to train or fine-tune public foundation AI models.
Encrypted & Isolated
All communications and stored databases use modern encryption. Access is strictly scoped to your authenticated account.
You Own Your Data
Export your resumes anytime in PDF, DOCX, or JSON. You can delete your content or account whenever you choose.
1. Information We Collect
When you use DiffCv, we collect minimal data required to provide our precision ATS builder and AI tailoring tools:
- Account Information: Name, email address, password hash (if registering via credentials), or OAuth profile identifier and avatar (if signing in via Google or GitHub).
- Resume & Career Details: Employment history, education, project descriptions, skills, certifications, and contact information you add to resumes.
- Uploaded Resumes & Files: PDF files you upload for automatic parsing and text extraction. Uploaded binary files are parsed in memory and not permanently retained as raw binaries.
- Target Job Descriptions: Job descriptions or keyword specifications you provide when running ATS diff analysis and resume tailoring.
- Billing Information: Subscription status and transaction identifiers. Payment processing (credit cards, PayPal) is handled directly by Paddle as our Merchant of Record; we never receive or store your complete payment card numbers.
2. How We Use Your Information
We process your data strictly to fulfill the following objectives:
3. Artificial Intelligence & Third-Party LLM Usage
DiffCv uses advanced artificial intelligence models (such as DeepSeek and OpenAI API endpoints) to assist with bullet rewrites, metric quantification, and job description alignment.
4. Data Sharing & Third-Party Services
We do not sell, rent, or trade your personal or career data to data brokers, recruiters, employers, or advertising networks. We only share information with trusted infrastructure providers who perform necessary business operations under contractual data protection agreements:
- Paddle: Merchant of Record responsible for secure checkout, billing, and tax compliance.
- OAuth Providers (Google, GitHub): To authenticate your identity when you opt to log in via third-party credentials.
- Database & Hosting Infrastructure: Secure cloud servers that host our database and application runtime.
5. Data Security & Storage
We implement industry-standard physical, electronic, and procedural safeguards. Sensitive communications are encrypted using Transport Layer Security (TLS 1.3). Passwords are never stored in plain text and are salted and hashed using bcrypt. Access to database environments is protected and strictly limited to authorized automated services.
6. Your Rights & Data Controls
Regardless of where you reside, we provide you with full agency over your career data in compliance with GDPR, CCPA, and global privacy standards:
- Access & Export: You can download and export all your resumes in standardized PDF and DOCX formats at any time.
- Correction: You can edit any personal, employment, or educational detail directly in the studio.
- Deletion: You can delete individual resumes or request complete account erasure, which permanently purges your stored records from our primary database.
7. Cookies & Session Storage
We use strictly necessary cookies and local storage tokens to maintain your authenticated session and retain user interface state. We do not use third-party cross-site tracking cookies.
8. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our privacy team at: