1. Introduction
Welcome to HeyCV ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume builder service at heycv.app.
By using HeyCV, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Resume Data
When you create a resume using HeyCV, you provide personal information including:
- Name
- Contact information (email address, phone number, physical address)
- Work experience
- Educational background
- Skills and certifications
- Projects and achievements
Storage: Your resume data is stored locally in your browser's local storage. We do not upload or store your resume data on our servers unless you explicitly choose to create an account or use cloud storage features.
2.2 Analytics Data
We use analytics services to understand how users interact with our service. We collect:
- Resume quality metrics (completeness score, number of sections)
- Engagement metrics (editing time, number of edits, sessions)
- Derived categories (job category, education tier, user type)
- Geographic location (country level only)
- Device and browser information
- Usage patterns and feature interactions
Important: Before sending any personal information (email, phone, name) to analytics services, we hash it using SHA-256 encryption. This means the actual values are not readable by anyone, including us.
2.3 Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity and store certain information. See our Cookie Policy for more details.
3. How We Use Your Information
We use the collected information for various purposes:
- To provide and maintain our service: Your resume data stays in your browser to power the resume builder functionality
- To improve our service: Analytics data helps us understand which features are used and how to improve them
- To optimize advertising: We use analytics to understand which marketing channels bring quality users (no personal ads shown to you)
- To detect and prevent abuse: We monitor for suspicious activity to protect our service
- To communicate with you: If you create an account, we may send service-related emails
4. Data Sharing and Third-Party Services
4.1 Analytics Providers
We use the following third-party services for analytics:
- Google Analytics 4: To analyze website traffic and user behavior. We implement Enhanced Conversions with hashed PII for better attribution.Google Privacy Policy
- Meta Pixel (Facebook): To measure advertising effectiveness and build audiences. We send hashed PII to improve Event Match Quality.Meta Privacy Policy
4.2 Data Security
We implement several security measures:
- All personal information is hashed (SHA-256) before transmission to third parties
- Resume data is stored locally in your browser (not on our servers)
- All connections use HTTPS encryption
- We follow industry best practices for data protection
Important: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.
5. Your Privacy Rights
5.1 GDPR Rights (EU Users)
If you are in the European Union, you have the following rights:
- Right to Access: You can request a copy of your personal data
- Right to Rectification: You can request correction of inaccurate data
- Right to Erasure: You can request deletion of your data
- Right to Restrict Processing: You can request we limit how we use your data
- Right to Data Portability: You can request your data in a portable format
- Right to Object: You can object to our processing of your data
- Right to Withdraw Consent: You can withdraw consent for data collection at any time
5.2 CCPA Rights (California Users)
If you are a California resident, you have the following rights:
- Right to know what personal information we collect
- Right to delete your personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
5.3 Cookie Preferences
You can manage your cookie preferences at any time through our cookie consent banner or by visiting our Cookie Policy.
6. Data Retention
We retain your information for different periods depending on the type:
- Resume data: Stored locally in your browser until you clear your browser data
- Analytics data: Retained according to Google Analytics and Meta policies (typically 26-50 months)
- Account data: If you create an account, we retain your data until you request deletion
7. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.
8. International Data Transfers
Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
10. Contact Us
If you have any questions about this Privacy Policy or want to exercise your privacy rights, please contact us: