Privacy Policy

Last updated: March 23, 2026

1. Introduction

CVWay ("we", "our", or "us") is an online CV/resume builder service. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services. By using CVWay, you agree to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address. We use magic link authentication — we do not store passwords.

2.2 CV/Resume Content

To provide our service, we collect and store the information you enter into your CV, including but not limited to:

Full name and contact details (email, phone, location)
Work experience, job titles, and descriptions
Education history
Skills, certifications, and languages
Projects, awards, and leadership roles

2.3 Payment Information

Payments are processed by Lemon Squeezy as our merchant of record. We never store your credit card numbers, bank details, or other payment credentials. We only store your subscription status, plan type, and the last four digits of your payment card for display purposes.

2.4 Usage Data

We collect anonymous usage data through PostHog, including pages visited, features used, and session information. This data helps us understand how our service is used and improve the experience.

3. How We Use Your Information

We use your information to:

Provide and maintain the CVWay service
Generate, store, and render your CVs
Process your subscription and payments via Lemon Squeezy
Power AI CV tailoring features when you choose to use them
Send transactional emails (e.g., magic link login, billing updates)
Improve our product based on aggregated usage data

We do not sell your personal information to third parties. We do not use your CV content for advertising purposes.

4. Data Storage and Security

Your data is stored securely in Supabase, our database provider. All data is encrypted in transit using HTTPS. We enforce row-level security (RLS) policies to ensure that each user can only access their own data.

5. Third-Party Services

We use the following third-party services to operate CVWay:

Supabase — authentication and data storage
Lemon Squeezy — payment processing (merchant of record)
PostHog — product analytics
AI Provider — powers CV tailoring features (see section 6)

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

6. AI Features

When you use AI CV tailoring, your CV content is sent to our AI provider for processing. The AI provider processes your data solely to generate the requested output and does not retain your data after processing is complete. AI-generated content is returned to CVWay and stored as part of your CV data.

7. Data Retention

We retain your CV data for as long as your account exists. We never automatically delete your CV data, even if your subscription lapses. If you cancel your Pro subscription, you have a 30-day grace period with full access. After that, your CVs become read-only (viewable but not editable or downloadable). Your data remains intact and accessible if you re-subscribe.

If you delete your account, all associated data will be permanently removed within 30 days.

8. Your Rights

You have the right to:

Access your personal data stored in CVWay
Correct inaccurate information in your account or CVs
Export your data — you can request a full data export at any time
Delete your account and all associated data

To exercise any of these rights, contact us at the email address listed in the Contact section below.

9. Cookies and Tracking

CVWay uses essential cookies for authentication and session management. We also use PostHog for product analytics, which may set cookies to track anonymous usage patterns. We do not use advertising cookies or third-party tracking for marketing purposes.

10. Children's Privacy

CVWay is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or an in-app notification. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@cvway.io.