Privacy model

TryCVPilot is designed not to permanently store your evidence bank, job descriptions, application questions, generated CVs, cover letters, or answers.

During generation, your inputs are submitted over HTTPS to a protected server route, sent to the AI provider, and discarded after the request completes. Generated content is returned to your browser for editing and export.

Supabase stores only account, subscription, and usage metadata such as your user profile, plan state, Stripe identifiers, and non-sensitive usage timestamps.

Request bodies and generated content must not be logged, stored in analytics, or written to database tables. If temporary background processing is added later, payloads should be encrypted and deleted quickly after completion or expiry.