1. Who We Are
SparrowCV is an AI-powered resume tailoring platform. This privacy policy explains how we collect, use, and protect your personal data. SparrowCV is committed to GDPR compliance and privacy by design.
2. Information We Collect
Information you provide:
- Account information: name, email address, password (hashed)
- Profile data: work experience, education, skills, languages, professional summary
- Profile photo (optional, processed and stored securely)
- LinkedIn URL (optional)
- Job descriptions you paste for resume generation
- Job preferences for the Autopilot feature
- Feedback provided during resume regeneration
Information collected automatically:
- Usage data: pages visited, features used, generation counts
- Device information: browser type, operating system
- Authentication tokens (session cookies)
3. How We Use Your Information
- Generate tailored resumes based on your profile and job descriptions
- Provide ATS compatibility scoring and recommendations
- Match you with relevant jobs (Autopilot feature)
- Send email digests and notifications (with your consent)
- Calculate match scores and provide actionable feedback
- Improve the Service through anonymized usage analytics
- Process payments through our payment processor
We never sell your personal data to third parties.
4. Data Storage and Security
Your data is stored securely in a PostgreSQL database with row-level security policies. Resume files and profile photos are stored in encrypted cloud storage with access controls. All data is encrypted in transit (TLS) and at rest.
5. Third-Party Services
We use trusted third-party services to operate SparrowCV:
- AI language model provider — To generate tailored resume content. Job descriptions and profile data are processed to create customized bullets and sub-headings.
- Payment processor — A third-party Merchant of Record handles billing, tax compliance, and payment data on our behalf. SparrowCV does not store credit card numbers.
- Email service provider — For delivering notifications, job digests, and account emails.
- Cloud infrastructure providers — For secure hosting, database storage, and file storage. All data is encrypted in transit and at rest.
6. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access — Request a copy of all your personal data
- Rectification — Correct any inaccurate data in your profile
- Erasure — Delete your account and all associated data
- Portability — Export your data in a machine-readable format
- Restriction — Request that we limit processing of your data
- Objection — Object to data processing for marketing purposes
You can exercise these rights from your Settings page (Account tab) or by emailing contact@sparrowcv.com. We will respond within 30 days.
7. Data Retention
Your profile and resume data is retained as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. Anonymized usage analytics may be retained indefinitely.
8. Cookies
We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is needed as we only use strictly necessary cookies.
9. Children's Privacy
SparrowCV is not intended for users under 16 years of age. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email. The "Last updated" date at the top reflects the most recent revision.
11. Contact
For privacy inquiries or to exercise your rights:
Email: contact@sparrowcv.com
Website: sparrowcv.com