Privacy Policy

SharkCV (“we”, “us”) provides an online resume builder. This policy explains what we collect and why.

Data we collect

• Account data: email, name, profile image, authentication provider, plan status, and a one-way password hash if you create a password. We never store your Google password or your plain-text password.
• Billing data: processed by iyzico (Turkey) and/or Lemon Squeezy (international). We store customer/subscription reference IDs and plan status, not full card numbers.
• Resume content: Free documents are kept in browser session storage. Premium may keep documents in browser local storage and synchronize up to five CVs, cover letters, and job descriptions to our PostgreSQL database so they are available across sessions and devices.
• AI requests: when you explicitly use a Premium AI feature, the resume fields, cover letter, instructions, and job description needed for that request may be sent to our AI provider (for example, OpenAI) to generate a response.
• Share links: a share link contains an encoded copy of the CV in the URL. Anyone with that link can view its contents. Do not share it with people you do not trust.
• Cookies & ads: essential auth cookies; optional AdSense cookies on Free after consent.

Legal bases

We process data to provide the service (contract), billing (legitimate interest / contract), and optional ads/analytics (consent).

Service providers

We use service providers to host the application and database, authenticate users, deliver email, process payments, provide AI features, and display consented advertising. Depending on the features you use, these may include Vercel, our PostgreSQL hosting provider, Google, Resend, iyzico, Lemon Squeezy, OpenAI, and Google AdSense. They process data under their own terms and privacy obligations.

Retention

Cloud CVs are retained while they remain in your Premium document list or until you request deletion. Account and billing records are kept while your account is active and as required for tax, fraud prevention, and legal compliance. Data may remain in limited backups until those backups expire. You may request deletion via Contact.

Security

We use access controls, encrypted HTTPS connections, and password hashing to protect account data. No online service can guarantee absolute security, so keep your account credentials and share links private.

Your rights

Depending on your region (including GDPR/KVKK), you may access, correct, export, or delete personal data, and withdraw cookie consent.

Contact

Privacy questions: privacy@sharkcv.app