How Cvalto handles your data.

When you use Cvalto, we collect:

• The CV content you upload (text extracted from your PDF/Word file), and, for analyses where you choose to include one, the original file itself
• Any job description or self-description you paste or type in for analysis
• Your account details from Clerk (name, email address) used for sign-in
• Usage data: which features you use and how often, to enforce plan limits fairly
• Any file, description, or contact details you submit through our Contact form

Your data is used only to:

• Generate the analysis, score, and CV output you request
• Save your history so you can revisit past analyses and generated CVs from your Dashboard
• Enforce your plan's usage limits
• Respond to support requests you send us
• Send you a few helpful emails about using your account, for example a reminder that a free credit is still unused. Every one has an unsubscribe link and you can stop them at any time. Account and payment emails, like receipts, are always sent.

We do not sell your data, and we do not use your CV content to train any AI model.

We use a small number of trusted service providers to run Cvalto. Your data passes through these services strictly to deliver the features you use, never for their own separate purposes:

• Clerk: handles sign-in and account authentication
• Supabase: stores your account data, analysis history, and generated CVs
• Anthropic (Claude API): processes your CV and job description text to produce the analysis and generated CV content
• Safepay: processes payments; your card details are entered on Safepay's secure checkout and are never stored by us
• Resend: delivers our emails: account and payment emails such as sign-in confirmations and receipts, replies to your support messages, and a few follow-up tips about using your account
• Microsoft Clarity: shows us, in anonymous form, how visitors use our pages (clicks, scrolling and page visits) so we can improve them. All text on the page is masked, so your CV content, name and email are not recorded

Some of these providers (Clerk, Supabase, Anthropic, Resend, and Microsoft) operate outside Pakistan, so using Cvalto means parts of your data may be processed on servers in other countries, including the United States and Europe. We only work with established providers that apply recognized security and data-protection standards, and your data is passed to them solely to deliver the features you use.

Your data is transmitted over encrypted connections (HTTPS) and stored with reputable infrastructure providers behind access controls, so only the systems and people that need it can reach it. No online service can promise perfect security, but we take reasonable, industry-standard steps to protect your information.

Your analyses and generated CVs remain in your history until you delete them yourself from your Dashboard, or until you close your account. Deleting a record from your Dashboard removes it permanently from our systems.

You can, at any time:

• Delete any individual analysis or generated CV from your Dashboard
• Request a copy of the data we hold about you
• Request full deletion of your account and all associated data

To request a data export or full account deletion, contact us at info@cvalto.com.

We use essential cookies required for sign-in and session management, and Microsoft Clarity analytics cookies that help us understand how our pages are used. We do not use advertising cookies.

Cvalto is intended for job seekers and professionals. It is not directed at children, and we do not knowingly collect data from anyone under 16.

If we make material changes to how we handle your data, we'll update this page and note the date above. Continued use of Cvalto after a change means you accept the updated policy.

Questions about this policy or your data can be sent to info@cvalto.com.