Privacy Policy

Personal & Account Information

When you create an account or use ShapeCV, we collect information such as your name, email address, and authentication credentials. This information is necessary to provide you with our services, authenticate your access, and manage your account.

Resume & Candidate Profile Content

The information you provide in your resumes and candidate profile—including work experience, job titles, employers, employment dates, responsibilities, education, institutions, degrees, skills, certifications, contact information, portfolio links, job preferences (such as target salary, notice period, and work authorization), and voluntary self-identification responses provided for job applications—is stored securely. This information is used solely to provide resume building, tailoring, ATS scoring, and application autofill services.

Usage & Diagnostic Information

We may collect information about how users interact with ShapeCV, such as feature usage, session information, diagnostic information, and technical information needed to operate, secure, and improve our services.

When you actively use the ShapeCV Chrome Extension on supported job postings and application pages (such as Workday, Greenhouse, Lever, LinkedIn, and corporate career portals), the extension may process relevant page information needed to provide ShapeCV functionality. This includes:

• Job Details: Job title, company name, job description, and job requirements.
• Application Fields: Application questions, form field labels, placeholder text, and relevant field metadata.
• Option Choices: Dropdown, radio button, and checkbox options when required to resolve specific form questions.

This information supports:

• Job relevance analysis and match scoring
• Job-to-resume matching and skill gap identification
• AI-assisted resume tailoring for the specific role
• Automated application form filling based on your candidate profile

Privacy Protection: The ShapeCV Chrome Extension operates strictly on the active job or application page to perform its intended features. The extension does not monitor, collect, or track your unrelated browsing history, personal search queries, or activity on non-job websites.

Certain features of ShapeCV utilize artificial intelligence to deliver resume tailoring, job relevance evaluations, and smart application autofill. ShapeCV uses OpenAI through the ShapeCV backend to power these AI-assisted features.

Depending on the feature being used, relevant information processed through our backend AI services may include:

• Resume content and structured profile summaries (for tailoring and relevance checks).
• Candidate profile details, such as skills, experience summaries, and employment preferences.
• Job descriptions and requirements extracted from the target job posting.
• Specific unresolved application questions and corresponding option choices that require contextual understanding.

• ✓To provide, operate, maintain, and improve the ShapeCV platform and Chrome Extension
• ✓To analyze job descriptions, generate job relevance scores, and tailor resumes to specific job requirements
• ✓To autofill job application fields on supported career sites at your direction
• ✓To process transactions and manage your access plans
• ✓To communicate important account updates, security notices, and customer support responses
• ✓To protect against fraud, unauthorized access, abuse, and technical vulnerabilities

We implement technical, organizational, and administrative security measures designed to safeguard your information:

• Encryption in Transit: All data transmitted between your browser, the Chrome Extension, and ShapeCV servers is encrypted using modern TLS/HTTPS protocols.
• Protection of Stored Information: Sensitive stored data, including account credentials and profile records, is protected with secure encryption at rest and access controls.
• Access Controls & Authentication: Strict role-based access limits administrative access, and secure authentication tokens (JWT) govern API sessions.
• Security Monitoring: Continuous monitoring and automated controls to detect and defend against potential security threats and unauthorized access.
• Infrastructure & Backups: Secure cloud infrastructure with periodic encrypted backups to ensure data integrity and availability.

We do not sell your personal information. We share your information only in the limited circumstances described below:

• •With your consent or direction: When you instruct ShapeCV to autofill an application form on a third-party career portal or export your resume.
• •Trusted Service Providers: We engage third-party service providers to assist with cloud hosting and infrastructure, database and storage management, payment processing, AI processing (including OpenAI), and system diagnostics. These providers are bound by contractual confidentiality and data protection obligations.
• •Legal Obligations: When required by applicable law, regulation, subpoena, or valid legal process, or to protect the rights, property, and safety of ShapeCV, our users, or the public.

ShapeCV retains your personal information for as long as reasonably necessary to:

• Provide you with continuous access to ShapeCV services, resumes, and extension features
• Maintain and administer your account
• Fulfill the specific purposes outlined in this Privacy Policy
• Comply with applicable legal, accounting, tax, regulatory, and dispute resolution requirements

When you delete your account or specific data, your information is removed from our active production systems. Residual copies may remain temporarily in secure, encrypted backups until such backups are overwritten in the ordinary course of system maintenance, or as required by law.

ShapeCV provides you with direct control over your personal data:

• Access: You can view all personal information and resume content stored in your ShapeCV account at any time.
• Export: You can export your resumes and profile data in accessible formats directly from your dashboard or by contacting support.
• Correct: You can update, modify, or correct inaccurate personal or resume details at any time through your dashboard.
• Delete: You can delete specific resumes, candidate profile details, or your entire ShapeCV account and associated data through your account settings or by contacting our support team.
• Extension Controls: You can toggle automatic page scanning on or off directly inside the Chrome Extension popup, or remove the extension at any time.
• Opt-Out: You can unsubscribe from non-essential marketing communications via the unsubscribe link in our emails.

We use cookies, browser local storage, and similar technologies to support essential functionality:

• •Essential Cookies & Tokens: Required for secure user authentication, session management, and platform navigation.
• •Extension Local Storage: The ShapeCV Chrome Extension uses browser local storage (chrome.storage.local) to locally cache your authentication token, candidate autofill profile, and user preferences for offline readiness and responsive form filling.
• •Preference Cookies: Remember your settings, theme choices, and application preferences.

You can manage cookies and site permissions through your browser settings. Note that disabling essential storage may impact your ability to log in or use extension features.

ShapeCV is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected information from a child under 16, we will take prompt steps to delete such data immediately.

Your information may be transferred to and processed in countries other than your country of residence, including where our cloud servers and service providers are located. We implement recognized legal safeguards and data protection standards to protect your personal information across international transfers.

We may update this Privacy Policy periodically to reflect enhancements to our services, platform updates, or evolving legal standards. We will notify you of any material changes by posting the revised policy on our website with an updated revision date, and where appropriate, through email notification.