PrismCV
ATS CheckerCompaniesSalariesFeaturesPricingLoginStart Free
Start Free

Privacy Policy

Last updated: February 2026

PrismCV ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume building and job tracking service.

1. Information We Collect

Information You Provide

  • Account Information: Email address, name, password
  • Resume Data: Work history, education, skills, contact information
  • Job Application Data: Applications you track, notes, recruiter contacts
  • Payment Information: Processed securely by Stripe; we do not store card numbers

Third-Party Contact Information You Enter

When tracking job applications, you may choose to store recruiter and hiring manager contact information (names, emails, phone numbers). This data:

  • Is entered voluntarily by you for your personal job tracking purposes
  • Is stored only in your account and not shared with third parties
  • Will be deleted when you delete the application or your account
  • Is your responsibility to manage in accordance with applicable laws

By entering third-party contact information, you confirm you have a legitimate basis for storing this information (such as an existing business relationship with the recruiter).

Information Collected Automatically

  • Usage Data: Anonymous analytics via Plausible (privacy-focused, no cookies)
  • Error Data: Technical error reports with PII redacted

2. How We Use Your Information

  • Provide and maintain our service
  • Generate tailored resumes and cover letters using AI
  • Track your job applications
  • Send job digest emails (with your consent)
  • Process payments and manage subscriptions
  • Improve our service

3. AI Processing Disclosure

We use Anthropic's Claude AI to provide resume tailoring, cover letter generation, and ATS analysis features. When you use these features:

  • Your resume content and target job descriptions are sent to Claude for processing
  • This data is processed according to Anthropic's Usage Policy
  • Your data is not used to train AI models without explicit consent
  • Processing occurs in the United States

4. Third-Party Services

We share data with the following service providers:

  • Anthropic: AI-powered features (resume tailoring, cover letters, ATS analysis). Resume content and job descriptions are sent for processing.
  • Stripe: Payment processing. We do not store card numbers.
  • Resend: Email delivery (verification emails, job digest emails)
  • Google: OAuth authentication (if you sign in with Google)
  • Sentry: Error tracking and monitoring. Error context and browser/device info may be collected; PII is redacted from payloads.
  • Plausible: Privacy-focused analytics (no personal data collected, no cookies)
  • Job aggregation services: We query Adzuna, JSearch (via RapidAPI), Remotive, and other job listing providers using your search queries (job titles, locations, keywords) to find matching jobs. No personal data beyond search terms is shared.

All processors are bound by Data Processing Agreements ensuring appropriate data protection.

5. Data Retention

  • Account data: Retained until you delete your account
  • Resumes and applications: Retained until you delete them or your account
  • Verification tokens: Deleted within 7 days of use
  • Payment records: As required by law and Stripe's policies

6. Your Rights

Under GDPR, CCPA, and other privacy laws, you have the right to:

  • Access: Request a copy of your personal data
  • Portability: Export your data in a machine-readable format
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Object: Opt out of marketing communications

To exercise these rights, visit your account Settings page or contact us at privacy@prismcv.com.

7. Data Security

We implement appropriate security measures including:
  • TLS encryption for all data in transit
  • Secure password hashing (bcrypt)
  • Rate limiting to prevent abuse
  • Regular security audits
  • PII redaction in logs

8. Cookies

We use minimal cookies required for authentication. Our analytics provider (Plausible) does not use cookies and does not track you across sites.

9. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect information from children.

10. International Data Transfers

Your data may be processed in the United States by our service providers. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Do Not Sell My Personal Information

We do not sell your personal information. PrismCV does not engage in the sale of personal information as defined by the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), or other similar state privacy laws.

We do not share your personal information with third parties for monetary consideration. The only third parties that receive your data are service providers who process it on our behalf (as described in Section 4), and they are contractually prohibited from using your data for any purpose other than providing services to us.

If you have questions about our data sharing practices, contact us at privacy@prismcv.com.

13. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to Know:You can request information about the categories and specific pieces of personal information we've collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete:You can request that we delete personal information we've collected from you, subject to certain exceptions.
  • Right to Correct: You can request that we correct inaccurate personal information we maintain about you.
  • Right to Opt-Out:You have the right to opt out of the "sale" or "sharing" of your personal information. As stated above, we do not sell your personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Categories of Personal Information We Collect

  • Identifiers: Name, email address, IP address
  • Professional information: Resume content, work history, education, skills
  • Commercial information: Subscription and payment history
  • Internet activity: Anonymous usage analytics

How to Exercise Your Rights

To exercise your California privacy rights:

We will verify your identity before processing your request. We aim to respond to all requests within 45 days as required by CCPA.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@prismcv.com