Privacy Policy

Last updated: February 10, 2026

What we collect

When you use CVRoast, we process:

• Resume text you paste into the tool
• Payment information if you purchase a full review (handled entirely by Stripe)
• IP address (hashed, for rate limiting only)

How we use your data

• Your resume text is sent to an AI model to generate your review
• Resume text is temporarily cached in memory for up to 2 hours so you can upgrade to a full review
• After 2 hours, your resume data is automatically and permanently deleted
• We do not store resumes in any database or file system

What we never do

• We never sell your data to anyone
• We never use your resume to train AI models
• We never share your resume with third parties
• We never store your resume beyond the 2-hour session window
• We never collect your name, email, or any personal identifiers

Payments

All payments are processed by Stripe. We never see or store your card number. Stripe's privacy policy applies to payment data: stripe.com/privacy.

Cookies

We do not use tracking cookies, analytics scripts, or any third-party trackers. The only client-side storage is a local counter for the number of resumes you've roasted (stored in your browser's localStorage).

Data retention

• Resume text: Deleted automatically after 2 hours
• Rate limit data: IP hashes reset every 24 hours
• Payment records: Retained by Stripe per their data retention policy
• Aggregate analytics: We track anonymous counts (number of roasts, payments) with no personally identifiable information

Your rights

Since we don't store personal data beyond the 2-hour session window, there is typically nothing to delete. If you have concerns, contact us at the email below.

Contact

For privacy questions: hello@cvroast.com