Privacy Policy

Resvyo (“we”) provides a tool that scores a CV against a specific job posting and, when you ask it to, rewrites that CV for the posting. For data protection purposes we are the data controller for the information described below. You can reach us at support@resvyo.com.

Account details. Your email address, a password stored only as a bcrypt hash — never in readable form — and a display name if you provide one.

The documents you upload. The text and structure of any CV you upload, and the job descriptions you paste in. This is the material the product exists to analyse.

Results. Scores, identified gaps, and any CVs or cover letters generated for you, so you can return to them.

Payment references. If you buy a pack, we store an identifier issued by Stripe and your remaining balance. We never see or store your card number.

Operational data. Standard server logs and counters used to apply rate limits and keep the service available.

We process your CV and the postings you paste in order to perform the service you asked for — that is, to perform our contract with you. Account details are processed on the same basis. Rate-limit counters and security logs are processed on the basis of our legitimate interest in keeping the service running and resistant to abuse.

We do not process your data for advertising, and we do not build a profile of you for any purpose beyond producing your own results.

OpenAI— the text of your CV and the job posting are sent to OpenAI’s API to produce your analysis and rewrite. This is processing on our instruction under their API terms.

Stripe — handles payment. Card details go to Stripe directly and never reach our servers.

Our hosting and email providers — operate the servers, database, and transactional email on our behalf.

That is the complete list. We do not sell your data, we do not share it with recruiters, employers, advertisers, or data brokers, and we do not use your CV to train any model — ours or anyone else’s.

Your account and its documents are kept while your account is open, so your history stays available to you. Parsed CV data is additionally held in a short-lived cache for up to 24 hours to avoid re-processing the same file.

When you delete your account, your CVs and generated documents are deleted with it. Records we are required to retain for accounting and tax purposes — the fact and amount of a payment — are kept for as long as the law requires.

You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable form. Email support@resvyo.com and we will respond within 30 days.

If you are in the UK or EEA and you believe we have handled your data improperly, you also have the right to complain to your national data protection authority.

Passwords are hashed with bcrypt. Sessions are signed and are invalidated everywhere when you change your password. Traffic to the service is encrypted in transit. No system is perfectly secure, but we do not store anything we do not need, and we never store your card details or your password in readable form.

If this policy changes materially we will update the effective date at the top of this page and, where the change affects how your data is used, tell you by email before it takes effect.