Privacy Policy

PlanCV, Inc. ("PlanCV," "we," "us," or "our") is a Kentucky-based company operating the Plancv AI resume builder at plancv.com and app.plancv.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

By accessing or using Plancv, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service. This policy should be read alongside our Terms of Service and Cookie Policy.

Account Information: When you create an account, we collect your name, email address, and password. If you sign up via LinkedIn or Google, we receive your public profile information as authorized by you.

Resume Data: When you use our Service, you provide resume content including work history, education, skills, contact details, and other career-related information. This may include sensitive professional data such as salary expectations, employment gaps, and career objectives.

Uploaded Documents: Resumes, cover letters, LinkedIn profiles, and job descriptions you upload for AI processing.

Usage Data: We automatically collect information about how you interact with the Service, including pages visited, features used, AI generations requested, ATS scans performed, session duration, and click patterns.

Device and Technical Data: Browser type, operating system, IP address, device identifiers, and referral URLs.

Payment Information: If you subscribe to a paid plan, our payment processor (Stripe) handles your payment card details. We do not store full card numbers on our servers.

Communications: Emails, support requests, and feedback you send to us.

Providing the Service: To generate AI-optimized resumes, perform ATS scoring, match job descriptions, and deliver all features of the Plancv platform.

AI Processing: Your resume content is processed by our AI models (including OpenAI GPT-4o-mini) to generate suggestions, rewrite bullet points, score ATS compatibility, and match job descriptions. AI-processed content is not used to train third-party AI models.

Account Management: To create and manage your account, process payments, and communicate with you about your subscription.

Service Improvement: To analyze usage patterns, diagnose technical issues, and improve the quality and performance of our AI algorithms and user experience.

Security and Fraud Prevention: To detect, investigate, and prevent unauthorized access, fraud, and other illegal activities.

Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

Marketing: With your consent, to send you product updates, career tips, and promotional materials. You can unsubscribe at any time.

We do not sell your personal data. We share information only in the following circumstances:

Service Providers: We use third-party providers to operate our Service, including cloud hosting (Vercel), AI processing (OpenAI), payment processing (Stripe), analytics (Google Analytics, Vercel Analytics), and customer support (Tidio). These providers access only the data necessary to perform their functions and are contractually obligated to protect it.

AI Processors: Resume content sent to OpenAI for AI generation is processed under our data processing agreement. OpenAI does not use data submitted via our API to train their models.

Legal Requirements: We may disclose your information if required by law, regulation, subpoena, court order, or in response to a government request.

Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

With Your Consent: We may share your information for any other purpose with your explicit consent.

Account Data: We retain your account information and resume data for as long as your account is active. You may delete your account and all associated data at any time from your account settings.

Deleted Accounts: When you delete your account, we permanently remove your resume content, personal information, and generated documents within 30 days. Some anonymized usage data may be retained for analytics purposes.

AI Processing Logs: Temporary processing logs are automatically deleted within 30 days.

Legal Obligations: We may retain certain data for longer periods if required by law (e.g., financial records for tax compliance).

We implement industry-standard security measures to protect your personal data, including:

Encryption in transit (TLS 1.3) and at rest (AES-256) for all resume data and personal information.

Role-based access controls limiting employee access to personal data on a need-to-know basis.

Regular security audits and vulnerability assessments.

Secure cloud infrastructure with automated backups and disaster recovery.

No security system is impenetrable. While we strive to protect your data, we cannot guarantee absolute security. If we discover a data breach affecting your personal information, we will notify you and relevant authorities as required by law.

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation:

Right of Access: Request a copy of the personal data we hold about you.

Right to Rectification: Request correction of inaccurate or incomplete personal data.

Right to Erasure: Request deletion of your personal data ("right to be forgotten").

Right to Restrict Processing: Request that we limit how we use your data.

Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.

Right to Object: Object to processing based on legitimate interests, including direct marketing.

Right to Withdraw Consent: Withdraw consent for processing at any time, without affecting the lawfulness of prior processing.

To exercise these rights, contact us at privacy@plancv.com or dpo@plancv.com. We will respond within 30 days. Our legal bases for processing include: performance of a contract (providing the Service), legitimate interests (improving the Service, security), consent (marketing communications), and legal obligations.

If you are a California resident, the California Consumer Privacy Act grants you the following rights:

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the third parties with whom we share it.

Right to Delete: Request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a clear opt-out mechanism.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, email privacy@plancv.com or use the data controls in your account settings.

Plancv is based in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the United States. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses and supplementary technical safeguards (encryption, access controls, pseudonymization) to ensure an adequate level of data protection.

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at privacy@plancv.com, and we will promptly delete it.

Our Service may contain links to third-party websites or services (e.g., LinkedIn, job boards). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top indicates when the most recent changes took effect. For material changes, we will notify you via email or a prominent notice on our Service before the changes take effect.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: privacy@plancv.com

Data Protection Officer (EEA/UK/Switzerland): dpo@plancv.com

Mail: PlanCV, Inc., 212 N 2nd St, Suite 100, Richmond, KY 40475, USA

Phone: +1 (610) 234-7860