1. Information We Collect
What you provide directly
- Account info: Name, email address, password (hashed), university, and graduation year.
- Profile info: Resume content, bio, LinkedIn URL, GitHub URL, GPA, work authorization status, and skills.
- Job application data: Job descriptions you paste, cover letters generated, company names, and application status.
- AI-generated content: Projects, code, and feedback generated on your behalf using our AI features.
- API keys: If you provide an Anthropic API key, it is stored encrypted at rest using AES-256 encryption and is never transmitted in plain text.
- Payment info: Processed securely via Stripe. We never store card numbers or CVVs on our servers.
- Consent records: Timestamp, IP address, and user-agent string collected when you agree to our terms during signup.
Collected automatically
- Usage data: Pages visited, features used, time spent, and interaction events.
- Device info: Browser type, operating system, IP address, and referring URL.
- Cookies: See Section 7.
2. How We Use It
- Provide, operate, and improve the Provieo platform and its features
- Process your resume and job descriptions through AI models (Anthropic Claude) to generate tailored content
- Display your public portfolio profile to recruiters and employers
- Send transactional emails (account confirmation, password reset, billing receipts)
- Send onboarding and product update emails as part of your account setup
- Send marketing emails only if you explicitly opt in during signup (you can unsubscribe anytime)
- Process payments and manage subscription billing via Stripe
- Prevent fraud, abuse, and unauthorized access
- Comply with legal obligations
We do not sell your personal information to any third party. We do not use your personal data or content to train AI models without your explicit written consent.
3. Information Sharing
Your Provieo portfolio profile is public by default, meaning recruiters and employers can view it. You can adjust your visibility settings in your account settings at any time.
We share data only with the following trusted service providers, who are contractually required to protect your data and may not use it for their own purposes:
- Anthropic: For AI content generation (resume tailoring, project building, cover letters). Your resume and job description content is sent to Anthropic's API. Anthropic's privacy policy applies to their processing.
- Supabase: For database storage and authentication.
- Stripe: For payment processing and subscription management.
- Resend: For transactional and onboarding email delivery.
- Google Analytics: For anonymized usage analytics.
- Vercel: For cloud hosting and infrastructure.
We do not share, sell, rent, or trade your personal information with any third party for their marketing purposes.
4. Data Storage & Security
All data is stored on secure US-based servers. We implement industry-standard security measures including:
- TLS/HTTPS encryption for all data in transit
- AES-256 encryption for sensitive data at rest (API keys)
- Bcrypt hashing for passwords (handled by Supabase Auth)
- Row-level security (RLS) policies in our database so users can only access their own data
- Regular security reviews of our infrastructure
No system is completely immune to security risks. While we implement these measures, we cannot guarantee absolute security. If a breach occurs that affects your personal data, we will notify you promptly by email and take immediate steps to mitigate the incident.
5. Data Retention
We retain your personal data for as long as your account is active. When you delete your account:
- Your profile, projects, resumes, and job application data are permanently deleted from our database
- Your authentication credentials are removed from our auth system
- Anonymized aggregate analytics data may be retained
- Billing records may be retained as required by applicable law
You can export all your data or delete your account at any time from your Settings page.
6. Your Rights
You have the following rights regarding your personal data:
- Access: Download a copy of all data we hold about you (available in Settings)
- Correction: Update inaccurate information at any time in your profile settings
- Deletion: Permanently delete your account and all associated data (available in Settings)
- Data portability: Export your data in JSON format from your Settings page
- Opt-out of marketing: Unsubscribe from marketing emails at any time via the unsubscribe link in any email
- Withdraw consent: Contact us to withdraw previously given consent for data processing
To exercise any of these rights or for questions about your data, email [email protected].
7. Cookies
We use the following types of cookies:
- Essential cookies: Required for authentication and keeping you logged in. Cannot be disabled without breaking core functionality.
- Analytics cookies: Google Analytics cookies to understand how users interact with our platform (anonymized). You can decline these via our cookie consent banner.
You can manage cookie preferences via the banner shown on your first visit, or by adjusting your browser settings. Declining analytics cookies will not affect your ability to use Provieo.
8. Children's Privacy
Provieo is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact [email protected] and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting a notice on the platform. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of Provieo after changes constitutes your acceptance of the updated policy.
10. Contact
Questions, concerns, or requests regarding your privacy?
Email us at [email protected]