1. Overview

NotBadCV (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, and how it is handled when you use the Service at notbadcv.com.

This policy is intended for a global audience and is designed to meet the standards of major international privacy frameworks, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and equivalent laws in other jurisdictions.

2. What Personal Data We Collect

When you use NotBadCV, you voluntarily provide the following information to generate your resume:

Identity data: Full name, professional title
Contact data: Email address, phone number, location, LinkedIn URL
Professional data: Work experience, education, skills, certifications, languages
Optional data: Profile photo, job description (for tailoring)

If you choose to receive your resume by email, we also collect your email address for that delivery.

3. How We Use Your Data

We collect and use your personal data solely for the following purposes:

Resume generation: Your information is sent to an AI model (Anthropic Claude) to produce tailored resume content.
PDF delivery: If requested, your resume is sent to the email address you provide.
Service improvement: Anonymised, aggregated usage analytics to understand how the Service is used. No personal identifiers are included.

We do not use your data for advertising, profiling, or marketing purposes.

4. Data Storage & Retention

We do not permanently store your resume data or personal information on our servers.

Your form data is saved in your browser’s local storage (localStorage) as a draft so you can return and continue where you left off. This data lives only on your device and is never sent to our servers except when you explicitly click “Generate”.
You can clear your draft at any time using your browser’s “Clear site data” or storage settings, or by clicking “Start Over” in the app.
Resume content sent to our API for generation is processed in-memory and not written to persistent storage.
If you choose to email your resume, your email address is used solely for that single delivery and is not retained afterwards.
We do not build user profiles, track you across sessions, or link resume sessions to your identity over time.

5. Third-Party Services

To deliver the Service, your data may be processed by the following categories of third-party providers: AI service providers (to generate resume content), cloud hosting providers (to host and deliver the site), and email delivery providers (to send your resume when you request it). None of these providers store your resume data beyond what is needed to process your request.

6. Cookies

NotBadCV uses minimal cookies. We do not use advertising or cross-site tracking cookies. We may use a session cookie to maintain your form state during your visit, and analytics may use a first-party cookie for aggregate page view counting only.

7. Your Privacy Rights

Depending on where you are located, you may have the following rights regarding your personal data:

Access — request confirmation of what personal data (if any) we hold about you.
Deletion / Right to be Forgotten — request deletion of your personal data.
Correction / Rectification — request correction of inaccurate data.
Portability — request a copy of your data in a machine-readable format.
Objection / Opt-out — object to certain processing of your data.
Withdrawal of Consent — withdraw consent for data collection or use at any time.

These rights apply to users in the EU (GDPR), California (CCPA), and other jurisdictions with applicable privacy laws. Given that we do not retain personal data after your session ends, most requests will be satisfied by confirming that no data is held.

To exercise any of these rights, contact us at privacy@notbadcv.com. We will respond within 30 days.

8. International Data Transfers

NotBadCV is accessible globally. When you use the Service, your data may be processed in countries other than your own (including the United States, where our hosting and AI providers operate). We ensure that such transfers are handled in compliance with applicable data protection laws and that appropriate safeguards are in place.

9. Data Security

All data is transmitted over HTTPS (TLS encryption). We do not store credentials or payment card data — payment processing (if applicable) is handled entirely by our payment provider. While we take reasonable precautions, no method of internet transmission is 100% secure.

10. Children

The Service is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

12. Contact

For privacy-related inquiries or to exercise your rights:

Email: privacy@notbadcv.com