Privacy Policy

1. Introduction

NBCV ("we," "our," or "us") is operated by Digifrot. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our AI-powered CV generation service.

2. Information We Collect

We collect the following types of information:

2.1 Account Information (via Google Sign-In)

• Google account ID (unique identifier)
• Email address
• Display name
• Profile picture URL

2.2 CV and Professional Data

• Base CV content you upload or paste
• Job descriptions you provide
• Generated CVs and cover letters
• Custom prompts or instructions you provide

2.3 Usage Data

• CV generation history and timestamps
• Feature usage (downloads, exports, edits)
• Session information and activity logs

2.4 Technical Data

• Browser type and version
• Device information
• IP address (for security purposes)
• Cookies and session identifiers

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To generate tailored CVs and cover letters based on your input
• Account Management: To create and maintain your user account
• Service Improvement: To analyze usage patterns and improve our AI models and features
• Google Drive Integration: To export your documents to Google Drive (when you authorize this feature)
• Communication: To send service-related notifications and respond to your inquiries
• Security: To detect and prevent fraud, abuse, and unauthorized access

4. Third-Party Services

We use the following third-party services to provide our service:

4.1 AI Processing Services

Your CV content and job descriptions are processed by AI language models (such as OpenAI GPT, Google Gemini, and Anthropic Claude) to generate tailored CVs. These providers process data according to their respective privacy policies and data processing agreements.

4.2 Google Services

• Google Sign-In: For secure authentication
• Google Drive API: For optional document export (only with your explicit consent)

4.3 Analytics

We use Mixpanel to understand how users interact with our service. This helps us improve the user experience. Analytics data is anonymized and aggregated where possible.

5. Data Storage and Retention

5.1 Storage Location

Your data is stored on secure servers. We implement industry-standard security measures to protect your information.

5.2 Retention Period

• Account Data: Retained while your account is active
• CV History: Retained for your convenience to access past generations; you can delete individual CVs or your entire history at any time
• Usage Logs: Retained for up to 12 months for security and service improvement purposes

5.3 Data Deletion

You can request deletion of your account and all associated data by contacting us. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication via Google OAuth 2.0
• Regular security assessments and updates
• Access controls limiting data access to authorized personnel
• CSRF protection for all form submissions

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Data Portability: Request your data in a portable format
• Objection: Object to certain processing of your data
• Withdraw Consent: Withdraw consent for optional processing at any time

To exercise any of these rights, please contact us using the information provided below.

8. Cookies

We use the following types of cookies:

• Essential Cookies: Required for the service to function (session management, authentication, CSRF protection)
• Analytics Cookies: Help us understand how you use our service (can be disabled)

You can control cookie preferences through your browser settings. Note that disabling essential cookies may prevent the service from functioning properly.

9. Children's Privacy

Our service is not intended for users under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information.

10. International Data Transfers

Your data may be processed in countries outside your country of residence, including countries that may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@digifrot.com
• Company: Digifrot

For data protection inquiries or to exercise your rights, please email us with the subject line "Privacy Request."