HyperCV Privacy Policy
Last Updated: 2025.07.09
Introduction
Welcome to HyperCV! We are committed to helping you build your professional resume while respecting and protecting your privacy.
This Privacy Policy ("Policy") clearly explains how we collect, use, store, share, and protect your personal information when you access or use our websites, mobile applications, browser extensions, and all related services (collectively, the "Services").
The entity operating the Services is HyperCV. Under applicable data protection laws like the EU's General Data Protection Regulation (GDPR), this company is the "Data Controller" of your personal information; under California law, it is the "Business".
Please read this Policy carefully before accessing or using our Services. By using our Services, you understand and agree to the data practices described in this Policy. Your use of our Services is also governed by our Terms of Service.
Privacy Highlights
This summary provides a quick overview of the key points in this Policy. It is not a substitute for the full text, which we strongly encourage you to read completely.
| Topic | Summary |
|---|---|
| What information do we collect? | Data You Provide Directly: Name, contact details, work and education history, skills, and payment information that you enter when creating a resume or purchasing a service. Data We Collect Automatically: IP address, device information, browser type, service usage (like clicks and pages viewed), and data collected via Cookies. |
| Why do we use your information? | Core Purpose: To provide the core services of resume creation, storage, and sharing. Other Purposes: To process payments, communicate with you, improve our product, conduct marketing (with your consent), and ensure service security and legal compliance. |
| Who do we share information with? | We do not sell your personal information. We only share it when necessary with trusted third-party service providers (like payment processors and cloud hosting services) to support our operations. We also share your resume with third parties (like potential employers) at your express direction. |
| What are your data rights? | You have the right to access, correct, and delete your personal information. Depending on your region, you may also have rights to data portability, restriction of processing, and objection to processing. You can exercise these rights through your account settings or by contacting us. |
| Data Security & Storage | We use industry-standard security measures (like encryption) to protect your data. Your information may be transferred to servers outside your home country (e.g., in the United States), but we ensure it receives an equivalent level of protection. |
| How to contact us? | For any questions, please email us at developer@hypercv.co. |
Full Privacy Policy
1. Information We Collect
We collect the following categories of information to provide and improve our Services:
- a) Information You Provide to Us
- Account Data: When you register for an account, we collect your name, email address, and password.
- Resume Data: When you use our tools to build a resume, you provide detailed personal information, including but not limited to:
- Identity & Contact Information: Phone number, mailing address, links to personal websites or social media profiles (e.g., LinkedIn).
- Professional & Educational Information: Work history, employer details, educational background, degrees, skills, certifications, language proficiency, and career objectives.
- Sensitive Personal Information: You may voluntarily choose to provide information such as a personal photograph, nationality, or visa status. Providing this information is entirely voluntary, and we will only process it based on your explicit instructions.
- Payment Data: When you purchase a premium service, our third-party payment processors collect and process your payment card information (such as credit card number, expiration date, and security code) and billing address. We do not store full payment card information ourselves.
- Communications Data: When you contact our customer support, participate in surveys, or otherwise communicate with us, we collect the content of your communications and associated metadata.
- b) Information We Collect Automatically
- Usage Data: We collect information about how you interact with our Services, such as the pages you visit, the features you use, the links you click, and the time and frequency of your resume creation or downloads.
- Device and Connection Data: We automatically collect your IP address, browser type and version, operating system, device model, unique device identifiers, and referring URL.
- Data from Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to operate and analyze the Services, personalize your experience, and for advertising purposes. For more details, see Section 6, "Cookies and Tracking Technologies."
2. How and Why We Use Your Information
Under the GDPR, we must have a lawful basis to process your personal information. This table details our purposes for processing and the corresponding legal bases.
| Purpose of Processing | Types of Data Processed | Legal Basis (under GDPR) |
|---|---|---|
| To provide, maintain, and personalize our core Services (e.g., creating, editing, storing, and hosting your resume) | Account Data, Resume Data, Usage Data, Device and Connection Data | Performance of a contract: This is necessary to fulfill our Terms of Service with you. |
| To process transactions and manage subscriptions (e.g., processing your payments, sending invoices) | Account Data, Payment Data | Performance of a contract |
| To communicate with you and provide customer support (e.g., responding to your inquiries, sending service notifications and security alerts) | Account Data, Communications Data | Performance of a contract; for some notices, our Legitimate interests. |
| To improve and develop our Services (e.g., analyzing user behavior to optimize features and user experience) | Usage Data, Device and Connection Data, Communications Data (in anonymized/aggregated form) | Our Legitimate interests in continuously improving and developing our commercial services. |
| For marketing and promotions (e.g., sending you information about new features or special offers) | Account Data, Usage Data | Your consent. You can opt out at any time via the unsubscribe link in the email or your account settings. |
| To maintain security, prevent fraud, and comply with the law (e.g., protecting our systems, enforcing our terms, responding to legal requests) | All relevant categories of data | Compliance with a legal obligation; our Legitimate interests in protecting our Services, users, and the public. |
3. Sharing and Disclosure of Information
We understand the sensitivity of your information and commit to never selling your personal information. We only share your information in the following limited and necessary circumstances:
- Service Providers: We partner with carefully selected third-party companies to help us operate. They are only permitted to access your information for the specific tasks we have assigned them and are contractually obligated to keep it confidential. These include:
- Cloud Infrastructure Providers (e.g., Amazon Web Services, Google Cloud) for hosting our Services and your data.
- Payment Processors (e.g., Stripe, PayPal) for securely processing your payments.
- Analytics Service Providers (e.g., Google Analytics) to help us understand service usage.
- Customer Support & Communication Tools (e.g., Zendesk, Mailchimp) to communicate with you.
- With Your Direction and Consent: A core feature of our service is sharing your resume. When you actively use a sharing feature (e.g., by generating a public link or sending it to a potential employer through our platform), your resume information will be shared according to your selection. You are solely responsible for this sharing.
- For Legal Reasons and Rights Protection: We may disclose your information if we have a good-faith belief that it is reasonably necessary to: (a) comply with applicable laws, regulations, legal processes, or enforceable governmental requests; (b) enforce our Terms of Service, including investigating potential violations; (c) detect, prevent, or otherwise address fraud, security, or technical issues; or (d) protect against harm to the rights, property, or safety of HyperCV, our users, or the public as required or permitted by law.
- Business Transfers: If HyperCV is involved in a merger, acquisition, asset sale, bankruptcy, or reorganization, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.
4. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it. The specific retention period depends on the type of information and our purpose for using it:
- We retain your Account Data and Resume Data as long as your account is active to provide you with continuous service.
- After you close your account, we may retain some information for a reasonable period to comply with legal obligations (e.g., tax and accounting regulations), resolve disputes, or prevent fraud. Afterward, we will securely delete or anonymize your information.
5. Your Data Rights and Choices
Depending on your jurisdiction, you may have the following data protection rights. We are committed to providing these core rights to all our users:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request to correct any information you believe is inaccurate or incomplete.
- Right to Erasure ("Right to be Forgotten"): Request that we delete your personal information, under certain conditions.
- Right to Restrict Processing: Request that we suspend the processing of your personal information, under certain conditions.
- Right to Data Portability: Request to receive the personal information you provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- Right to Object: Object to our processing of your personal information based on our legitimate interests (especially for direct marketing).
- Right to Withdraw Consent: Where we process your information based on your consent, you can withdraw that consent at any time.
How to Exercise Your Rights:
You can access, correct, or delete most of your information directly by logging into your HyperCV account settings. For other requests, or if you are unable to perform the action via your account settings, please email us at developer@hypercv.co. To protect your privacy and security, we will take reasonable steps to verify your identity before processing your request.
Right to Lodge a Complaint:
If you are in the European Economic Area (EEA), UK, or Switzerland, you have the right to lodge a complaint with your local data protection supervisory authority about our processing of your personal information.
6. Cookies and Tracking Technologies
Cookies are small text files stored on your device. We and our third-party partners use cookies and similar technologies (like pixel tags and web beacons) for the following purposes:
- Strictly Necessary Cookies: To ensure the core functionality of the Services, such as user login, account management, and security. The Services cannot function without them.
- Performance and Analytics Cookies: To help us collect data on how users interact with the Services (e.g., most popular pages) to analyze and improve them.
- Functionality Cookies: To remember your preferences (like language choice) and provide a more personalized experience.
- Advertising and Marketing Cookies: To display more relevant advertisements to you on and off our Services and to measure the effectiveness of advertising campaigns.
Your Choices: You can manage or reject cookies through your browser settings. Most browsers automatically accept cookies, but you can usually modify your settings to decline them. We may also provide a Cookie Consent Management Tool that allows you to make granular choices about non-essential cookies. Please note that disabling cookies may affect your ability to use certain features of our Services.
Do Not Track (DNT) Signals: Some browsers transmit "Do Not Track" signals. As there is no industry-wide standard for how to respond to DNT signals, our Services do not currently respond to them.
7. Data Security
We take the security of your information very seriously. We implement and maintain reasonable administrative, technical, and physical security safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Data Encryption: Encrypting sensitive data both in transit (using TLS/SSL) and at rest.
- Access Control: Applying the principle of least privilege to strictly limit internal access to personal information.
- Security Audits: Conducting regular security assessments and vulnerability scanning.
Despite our robust measures, no system is absolutely secure. We cannot guarantee that your information is 100% secure during its transmission over the internet or while stored on our systems.
8. International Data Transfers
Our Services are global, and your personal information may be transferred to and stored in countries other than your country of residence (for example, our servers and third-party service providers may be located in the United States). The data protection laws in these countries may differ from those in your jurisdiction.
When we conduct such cross-border transfers, we take appropriate legal safeguards to ensure that your personal information receives an adequate level of protection. For data transferred from the EEA, UK, or Switzerland to other countries, we will rely on legal mechanisms such as the European Commission's Adequacy Decisions or implement Standard Contractual Clauses (SCCs).
9. Children's Privacy
Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. In the United States, our Services are not directed to children under 13, in compliance with the Children's Online Privacy Protection Act (COPPA).
If you believe we may have collected personal information from a child without parental or guardian consent, please contact us immediately at developer@hypercv.co, and we will take steps to investigate and remove such information.
10. Supplemental Notices for Users in Specific Regions
a) Notice for Users in the EEA, UK, and Switzerland
- Data Controller: As stated in the Introduction, HyperCV is the Data Controller for your personal information.
- Data Protection Officer (DPO): If you are required to appoint a DPO under Article 37 of the GDPR, provide their contact details here: dpo@hypercv.com. If not required, you can state: "We are not currently required by law to appoint a Data Protection Officer, but we have assigned a privacy team to oversee matters related to this Policy. You can reach them at developer@hypercv.co."
- Your Rights: You have all the rights detailed in Section 5 of this Policy.
b) Notice for California Residents
- Categories of Personal Information Collected: In the preceding 12 months, we have collected the categories of personal information described in Section 1.
- "Sale" or "Sharing" of Personal Information:
- We do not "sell" your personal information in the traditional sense for monetary payment.
- However, our use of certain third-party advertising and analytics cookies may be considered "sharing" (for cross-context behavioral advertising) or a "sale" under the CCPA/CPRA.
- You have the right to opt out of such "sharing" by adjusting your cookie settings.
- Sensitive Personal Information: We do not use your sensitive personal information (as defined by the CPRA) for the purpose of inferring characteristics about you. You have the right to limit our use of such information, though this right may be limited as we only use it when necessary to provide the Services to you.
- Your Rights: In addition to the rights in Section 5, you also have:
- The Right to Know: To learn the specifics of how we collect, use, and disclose your personal information.
- The Right to Non-Discrimination: To not be discriminated against for exercising your privacy rights.
- How to Exercise Your Rights: You or your authorized agent can submit requests by emailing us at developer@hypercv.co.
- "Shine the Light" Law: California residents may also request certain information regarding our disclosure of personal information (if any) to third parties for their direct marketing purposes under the "Shine the Light" law.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. If we make material changes, we will notify you before they take effect, either by sending a notice to the email address associated with your account or by posting a prominent announcement on our website. We encourage you to review this page periodically for the latest information on our privacy practices.
12. Contact Us
If you have any questions, comments, or concerns about this Privacy Policy, our privacy practices, or if you wish to exercise your data rights, please do not hesitate to contact our dedicated privacy team:
Primary Contact (Email):
developer@hypercv.co
Mailing Address:
HyperCV
Attn: Privacy Team / Legal Department