Privacy Policy

This Privacy Policy explains what data Weave CV collects, how we use it, and what choices you have. We wrote it in plain English on purpose — if anything is unclear, email us and we'll rewrite it. The short version: we only collect what we need to make the product work, we never sell your data, we never train AI models on it, and you can delete everything at any time.

We collect three categories of data: Account data — your email address and a hashed password, or a Google/GitHub OAuth identifier if you sign in that way. Résumé content — everything you type into the editor (work history, education, skills, contact details). Usage data — anonymized page views, error logs, and which template you used. We do not use third-party analytics; this is collected by our own server. We do not collect: precise location, contacts, browser history, advertising identifiers, or any data from cookies beyond the one session cookie that keeps you logged in.

Your account data lets you log in. Your résumé content is rendered into the editor and exported as PDFs when you ask for one. Usage data helps us fix bugs and decide what to build next. We do not use your résumé content to train machine-learning models, share it with partners, sell it to recruiters, or surface it in search.

Under the GDPR (and equivalent laws elsewhere), you have the right to: Rectify — edit anything in the editor, any time. Delete — wipe individual résumés or your whole account from Settings → Account. Deletion is immediate and permanent. Object — opt out of any non-essential processing by emailing us.

Active résumés are kept until you delete them. Account data is kept until you delete your account.

We use exactly one cookie: weave_session, a first-party session token that keeps you signed in. It expires after 30 days of inactivity. No advertising cookies, no third-party trackers, no fingerprinting, no Google Analytics.