1. Introduction

This Privacy Policy explains how AI Resume Builder ("we," "us," or "our") collects, uses, stores, and shares your personal information when you use GetHireVault (the "Platform"). We are committed to protecting your privacy and handling your data with transparency and care.

2. Information We Collect

We collect the following categories of information:

Account Information:

Name and email address (collected during sign-up via Supabase Auth)
Authentication provider information (if you sign in via Google or another provider)
Account preferences and settings

Resume and Career Data:

Resume content you create or upload (work history, education, skills, contact details)
Cover letters, ATS analyses, skills gap reports, interview prep content, career path analyses, and resignation letters generated on the Platform
Job descriptions you provide for tailoring purposes

Usage and Technical Data:

Pages visited, features used, and interaction patterns within the Platform
Device type, browser type, operating system, and screen resolution
IP address and approximate geographic location
Referring URL and exit pages

3. How We Use Your Information

We use your information for the following purposes:

To provide, operate, and maintain the Platform and its AI-powered features.
To process your inputs and generate AI-powered career documents (resumes, cover letters, ATS analyses, etc.).
To manage your account, subscription, and billing (processed through Creem).
To track usage against your subscription tier limits.
To improve and optimize the Platform, including AI model performance and user experience.
To communicate with you about account updates, service changes, and support inquiries.
To detect, prevent, and address technical issues, fraud, and abuse.
To comply with legal obligations and enforce our Terms of Service.

4. Third-Party Services

Your data may be processed by the following third-party service providers:

Supabase — Authentication, database hosting, and data storage.
Creem — Payment processing and subscription management (Merchant of Record). Creem's own Privacy Policy applies to payment data.
Vercel — Application hosting and CDN delivery.
AI Model Providers — Your inputs are processed by AI models to generate career content. We do not use your data to train or fine-tune AI models.
Google Analytics — Usage analytics and traffic measurement (anonymized where possible).

5. Data Storage and Security

Your data is stored on secure cloud infrastructure provided by Supabase and Vercel. We implement industry-standard security measures including encryption in transit (TLS/HTTPS) and at rest, access controls, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account information and resume data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where required by law or for legitimate business purposes (such as fraud prevention or record-keeping). Anonymized and aggregated usage data may be retained indefinitely.

7. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you have the following rights:

Access — Request a copy of the personal data we hold about you.
Correction — Request correction of inaccurate or incomplete data.
Deletion — Request deletion of your personal data.
Portability — Request a copy of your data in a structured, machine-readable format.
Objection — Object to processing of your personal data for specific purposes.
Restriction — Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at muhammadmurtaza6211@gmail.com. We will respond to your request within 30 days.

8. Cookies and Tracking

The Platform uses essential cookies for authentication and session management. We also use Google Analytics to understand how visitors interact with the Platform. You can control cookie settings through your browser preferences. Disabling essential cookies may affect Platform functionality.

9. Children's Privacy

The Platform is not intended for users under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via email or a prominent notice on the Platform.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at muhammadmurtaza6211@gmail.com.