Legal
Privacy Policy
Last updated: January 6, 2026
ClayCV ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume builder service at claycv.com (the "Service").
1. Information We Collect
Personal Information You Provide
- Account information: name, email address, password
- Resume content: employment history, education, skills, certifications, and other professional details
- Contact information: phone number, address, LinkedIn profile
- Profile photo (if uploaded)
- Payment information (processed securely by Stripe)
Information Collected Automatically
- Device information: browser type, operating system, device identifiers
- Usage data: pages visited, features used, time spent
- IP address and approximate location
- Cookies and similar tracking technologies (see Section 5)
2. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: Generate and store your resumes, provide PDF downloads
- Account Management: Create and manage your account, authenticate access
- Personalization: Save your preferences, remember your settings
- Communication: Send service updates, respond to inquiries
- Analytics: Understand how users interact with our Service (with consent)
- Legal Compliance: Comply with applicable laws and regulations
3. Data Storage and Security
Your data is stored on secure servers provided by Supabase (database) and Vercel (hosting), both of which maintain industry-standard security certifications. We implement:
- Encryption in transit (TLS/SSL) and at rest
- Regular security audits and vulnerability assessments
- Access controls limiting data access to authorized personnel
- Secure authentication via Supabase Auth
While we implement robust security measures, no method of transmission over the Internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
4. Sharing of Information
We share your information only in the following circumstances:
Service Providers
- Supabase: Database and authentication
- Vercel: Website hosting and deployment
- Google Analytics: Website analytics (with consent)
- Stripe: Payment processing
Legal Requirements
We may disclose your information if required by law, court order, or governmental authority.
We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.
5. Cookies and Tracking Technologies
We use cookies and similar technologies with your consent. You can manage your preferences at any time via our cookie settings.
Cookie Categories
Strictly Necessary
Required for the website to function. Cannot be disabled. Includes session cookies and security tokens.
Functional
Remember your preferences (e.g., zoom level, resume data). Required consent: Yes.
Analytics
Help us understand how visitors use our Service (Google Analytics). Required consent: Yes.
Marketing
Used for personalized advertising. Currently not in use. Required consent: Yes.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our Service.
- Account data: Retained until you delete your account
- Resume data: Retained until you delete the resume or your account
- Analytics data: Aggregated and anonymized after 26 months
- Legal records: Retained as required by law (e.g., payment records for 7 years)
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR) and similar laws, you have the following rights:
- Right to Access (Article 15): Request a copy of your personal data
- Right to Rectification (Article 16): Request correction of inaccurate data
- Right to Erasure (Article 17): Request deletion of your personal data
- Right to Restriction (Article 18): Request limitation of processing
- Right to Data Portability (Article 20): Receive your data in a machine-readable format
- Right to Object (Article 21): Object to certain types of processing
- Right to Withdraw Consent: Withdraw consent at any time via cookie settings
To exercise these rights, please contact us or email privacy@claycv.com.
8. Do Not Sell or Share My Personal Information (CCPA)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information.
ClayCV does NOT sell or share your personal information.
We have not sold personal information in the preceding 12 months and have no plans to do so. We do not share personal information for cross-context behavioral advertising.
Your California Rights:
- Right to Know: What personal information we collect and how we use it
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate information
- Right to Opt-Out: Opt out of the sale or sharing of personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
To exercise your CCPA rights, email us at privacy@claycv.com with the subject line "CCPA Request".
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
10. Children's Privacy
Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:
- Email: privacy@claycv.com
- Contact Form: claycv.com/contact
For EU residents: You also have the right to lodge a complaint with your local data protection authority. Find your DPA: European Data Protection Board Directory.