Privacy Policy

Effective Date: August 19, 2026

Application: CraftCV (com.craftcv.app)

Contact & Data Controller: support@prismtechventures.co.za

1. Information We Collect and Process

When you use CraftCV to create resumes, cover letters, and tailor professional documents, we process:

• Resume & Job Description Data: User-submitted text, skills, job titles, and experience solely to generate tailored resume bullets, ATS match scores, cover letters, and formatted exports.
• Anonymous Account Identifiers: We utilize Firebase Anonymous Authentication to maintain secure session credentials and entitlement state without collecting your personal name, passwords, or telephone numbers.
• Purchase & Subscription Information: Google Play purchase tokens to verify Pro subscription status. We do not process or store credit card numbers or financial account information.
• Diagnostics & App Check: Anonymous device security verification tokens (Firebase App Check / Play Integrity) to protect services from abuse.

2. How We Use Information

We use the processed data strictly to:

• Provide AI-powered resume tailoring, keyword optimization, and cover letter creation.
• Generate downloadable DOCX and PDF document formats.
• Verify Google Play subscription status to deliver Pro benefits.
• Serve non-personalized ads (rewarded and interstitial) via Google AdMob in accordance with Google User Messaging Platform (UMP) consent.

3. Data Sharing & Third-Party Service Providers

We do not sell, rent, or trade your personal data. We partner only with trusted service providers:

• Google Firebase: Anonymous authentication and security attestation.
• Google Play Billing: In-app subscription processing and reconciliation.
• Google AdMob & UMP: Privacy-compliant rewarded and interstitial advertisements.
• Convex: Encrypted cloud database and serverless backend hosting.
• AI Providers (Google Gemini & Groq): Real-time text generation. Data sent to AI models is used exclusively for response generation and is not used to train public models.

4. Data Retention & Security

Your resume input text is processed in-memory and is not retained permanently on backend databases. Subscription records and usage counters are stored using industry-standard AES-256 encryption. We implement HTTPS/TLS 1.3 encryption for all data in transit.

5. Your Rights & Data Deletion

You have the right to request the deletion of all data associated with your session at any time. For instructions and direct requests, please visit our Data Deletion Page or email support@prismtechventures.co.za.

6. Changes to This Policy

We may update this Privacy Policy periodically. Any updates will be posted directly on this URL with an updated effective date.