Privacy
What we store
Your email address; every version of your resume and your conversations with the assistant; and the files and images you send (old resumes, transcripts, screenshots, photos, etc.), kept as-is in private storage that only the system can read. We use them to extract text and, later, to improve how well we read documents. If you join the waitlist, we keep your email only to tell you when your place is ready. The first time you open the site, a cookie in your browser remembers for 30 days where you came from (one of our channel links, the name of the site that linked here, or nothing) and the first page you opened; when you sign up, that record is saved with your account so we can see which channels bring sign-ups and payments. We also count new visitors per source each day: numbers only, not who they were. None of this goes to an outside analytics service.
Who can see it
Only you, by default. The first time you open the app (and any time later in Settings), you can choose to let the VibeCV team read your conversations to improve the product and fix problems; we never publish or sell them, and you can turn it off any time, after which the team can no longer see them. To turn what you say into a resume, your conversation, the images you send and your current resume are sent to the AI model provider DeepSeek for processing. The domain of each link in your resume (such as github.com, without the rest of the address) is sent to Google's website icon service to show that site's logo in the PDF. Please don't put ID numbers, patient names, hospital record numbers or similar information in the chat, and cover them up before taking a screenshot.
What you can do
At any time, open the avatar menu in the top-right corner and choose "Export all my data", or go to "Account settings" to delete your account. Deleting your account permanently deletes all your resumes, versions, conversations, uploaded files and images, and the record of where you came from; deleting a single resume removes it from your library at once, and 30 days later permanently deletes it with its versions, conversation, files and images; during those 30 days, if you allowed the team to read your conversations, the team can still read this one, to learn what didn't work for you. Only daily usage counts are kept (how many turns, tokens and how much it cost; no resume or conversation content), to prevent abuse. The daily visitor counts per source aren't tied to anyone and stay too.