Introduction
At OpenCV.app, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CV building and hosting service.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Username
- Password (encrypted)
- Authentication tokens
Profile Information
You choose what information to include in your CV, which may include:
- Personal information (name, contact details, location)
- Professional summary and bio
- Work experience and employment history
- Education and certifications
- Skills and competencies
- Projects, awards, and exhibitions
- Social media links
Usage Information
We automatically collect:
- Consent-based profile views and PDF download counts
- Coarse device category and trusted two-letter country code
- Referrer hostname and bounded UTM campaign values without query parameters
AI Writing
AI writing is disabled by default. When enabled and you explicitly request a draft, the configured provider receives only the visible profile text fields you selected and the job description. We omit contact details, email, social identifiers, media, private metadata, and imported source files. OpenCV does not persist the prompt or draft; you must review and explicitly apply or copy it.
How We Use Your Information
We use your information to:
- Provide, maintain, and improve our service
- Create and manage your account
- Display your public profile when you choose to make it public
- Communicate with you about service updates and support
- Ensure security and prevent fraud
- Comply with legal obligations
- Analyze usage patterns to improve user experience
Information Sharing and Disclosure
Public Profiles
Public and Unlisted profiles are accessible to anyone on the internet through their username URL. Their enabled public features include contact, PDF export, approved testimonials, visible project images, and analytics.
Unlisted Profiles
Unlisted profiles are not access-controlled or confidential. We exclude them from the in-app directory and ask search engines not to index them, but robots directives are advisory. Search engines and other third parties may retain content that was shared or cached.
Passcode Profiles
Passcode mode reduces casual access and keeps profiles out of the directory and search indexing. It cannot prevent an authorized recipient from resharing, downloading, or capturing profile content. Testimonial recommendation links are separate capability links and are not protected by the profile passcode.
Service Providers
We may share information with third-party service providers who help us operate our service, including:
- Hosting and infrastructure providers (Vercel, Convex)
- Authentication services
- Analytics providers
Legal Requirements
We may disclose your information if required by law, legal process, or to protect the rights, property, or safety of OpenCV.app, our users, or others.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit and at rest
- Secure authentication mechanisms
- Regular security assessments
- Access controls and monitoring
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
Your Rights and Choices
You have the right to:
- Access and update your profile information at any time
- Control your profile's access mode (Private, Passcode, Unlisted, or Public)
- Delete your account and associated data
- Request a copy of your data
- Opt out of non-essential communications
Data Retention
We retain your information for as long as your account is active or as needed to provide services. Raw profile analytics are deleted after 90 days in bounded batches and do not store IP addresses. When you delete your account, we will delete or anonymize your data, except where we are required to retain it for legal or legitimate business purposes.
Cookies and Tracking
We use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookies through your browser settings, though this may affect functionality.
Children's Privacy
Our service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If we become aware of such collection, we will delete the information promptly.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our service or updating the "Last updated" date. Your continued use after changes indicates acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us through our support channels.