Privacy Policy

Information You Provide

When you register and complete onboarding, we collect: your full name, email address, phone number, LinkedIn profile URL, current location, years of experience, target job titles, employment preferences, work authorization status (visa type), and your base resume (PDF format). We also collect any notes or messages you send through our platform.

Information from Google OAuth

When you sign in with Google, we receive your name, email address, and profile photo from your Google account. We do not receive your Google password.

Automatically Collected Information

We collect usage data such as pages visited, features used, timestamps of pipeline runs, and IP address for security and analytics purposes.

Core Service Delivery

We use your profile data and resume to power our AI job matching and resume tailoring pipeline — finding relevant job listings, generating ATS-optimized resumes, and submitting applications on your behalf.

Account Management

We use your information to create and manage your account, verify your identity, process your onboarding, and communicate with you about your service status.

Service Improvement

We analyze aggregated, anonymized usage data to improve our matching algorithms, pipeline performance, and user experience.

Communications

We send transactional emails related to your account (activation, pipeline completion, quota updates). We do not send marketing emails without your explicit consent.

Database Storage

Your profile data, job preferences, and pipeline history are stored in Supabase — a secure, SOC 2 compliant database hosted on AWS infrastructure.

Document Storage

Your base resume and all AI-generated documents are stored in Supabase Storage with private, access-controlled file buckets. Documents are never publicly accessible.

Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where required by law.

We Do Not Sell Your Data

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

AI Processing Partners

Your resume content is processed by Anthropic's Claude AI to generate tailored resumes. This processing is governed by Anthropic's data processing agreements and privacy policies.

Job Applications

When we apply to jobs on your behalf, your tailored resume and contact information are shared with the relevant employers or job platforms, as is the purpose of the Service.

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority.

Access & Portability

You may request a copy of all personal data we hold about you at any time by emailing us.

Correction

You may update your profile information directly through the Settings page in your dashboard.

Deletion

You may request complete deletion of your account and all associated data by contacting our support team.

Objection

You may object to processing of your personal data at any time by contacting us. Note that certain processing is necessary to provide the Service.

Technical Safeguards

We implement row-level security (RLS) policies ensuring no user can access another user's data. All data is encrypted in transit (HTTPS/TLS) and at rest. Access to your documents requires time-limited signed URLs.

Access Controls

Only authorized ZUVA administrators can access client data, and only for the purpose of configuring and running the job automation pipeline on your behalf.

Session Cookies

We use secure, HTTP-only cookies to maintain your authentication session via Supabase. These are strictly necessary for the Service to function and are not used for tracking or advertising.

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your experience.

Cookies We Use

ZUVA uses only strictly necessary cookies: (1) Authentication cookies — secure, HTTP-only session cookies managed by Supabase to keep you logged in. (2) Security cookies — CSRF protection tokens to prevent cross-site request forgery attacks. We do not use any advertising, analytics, or third-party tracking cookies.

Managing Cookies

Since we only use strictly necessary cookies, disabling them will prevent you from logging in and using the Service. You can manage cookies through your browser settings, but please note this may affect your ability to access ZUVA.

Third-Party Cookies

We do not allow any third-party cookies on our platform. We do not use Google Analytics, Facebook Pixel, or any other tracking services. Your browsing activity on ZUVA is never shared with advertisers.