Last Updated: April 13, 2026
This Privacy Policy is provided in English. A Portuguese version (Política de Privacidade) is also available. The Portuguese version shall control for legal purposes in Brazil.
CV Sapiens collects the following categories of personal data:
Name: Your full name as provided during account registration
Email Address: Used for account authentication, communication, and service notifications
Password: Stored in encrypted (hashed) format using secure hashing algorithms
OAuth Provider Information: If you sign in using Google or other OAuth providers, we receive basic profile information (name, email) from the provider
When you create or upload a resume, we collect and store:
Employment history (job titles, companies, dates, descriptions)
Educational background (institutions, degrees, dates, certifications)
Skills, qualifications, and professional competencies
Contact information (phone numbers, addresses, professional links)
Personal details (date of birth, nationality, if provided)
Uploaded files (PDF or DOCX resumes imported into the system)
Important: If you upload information such as CPF, RG, immigration status, disability information, or other sensitive personal data, this may qualify as sensitive personal dataunder LGPD Article 5, II. We apply additional safeguards for such data as required by law.
Cover letter content, including recipient information, job descriptions, and personalized content
Design preferences and formatting choices
IP address and browser information
Device information and operating system
Usage patterns and feature interactions
Error logs and performance data (anonymized where possible)
Under LGPD Article 7, we process your personal data based on the following legal bases:
Execution of Contract (Art. 7º, V): We process account data, resume data, and cover letter data to provide the core resume building and optimization services you have requested. This includes storing your resumes, generating AI-powered recommendations, and enabling PDF export.
Legitimate Interest (Art. 7º, IX): We process usage and technical data to improve our platform, ensure security, prevent fraud, and enhance user experience. This includes analyzing anonymized usage patterns to improve service quality.
Consent (Art. 7º, I): We obtain your explicit consent for marketing communications and non-essential cookies. You may withdraw consent at any time.
Compliance with Legal Obligation (Art. 7º, II): We retain financial records and transaction data as required by Brazilian tax and accounting laws (typically 5 years).
We process your personal data for the following specific purposes:
Service Provision: Creating, storing, editing, and managing your resumes and cover letters
AI-Powered Optimization: Analyzing job descriptions and generating personalized resume recommendations using artificial intelligence
Account Authentication: Verifying your identity and securing access to your account
Payment Processing: Processing subscription payments and managing billing (if applicable)
Security and Fraud Prevention: Detecting and preventing unauthorized access, fraud, and abuse of the Service
Service Improvement: Analyzing usage patterns (anonymized) to enhance features and user experience
Legal Compliance: Meeting obligations under Brazilian law, including tax and accounting requirements
We do not process your data for purposes other than those stated above without your consent or as required by law.
Critical AI Processing Disclosure:
CV Sapiens uses artificial intelligence to process your resume content and generate optimization recommendations. This section explains how AI is used in our service.
AI Processing: When you use our AI optimization features, your resume content and job descriptions are processed by third-party AI service providers (OpenAI) to generate personalized recommendations. This processing is automated and occurs in real-time.
AI Output Accuracy: AI-generated content is probabilistic and may contain inaccuracies, errors, or suggestions that do not match your intent. You are solely responsible for reviewing, verifying, and approving all AI-generated content before using it in your resume or cover letter.
Human Review: AI-generated recommendations are not reviewed by humans before being presented to you. All AI outputs should be carefully reviewed and edited by you.
Data Sharing with AI Providers: When you use AI features, your resume content and job descriptions are transmitted to OpenAI (a US-based service provider) for processing. This constitutes an international data transfer as described in Section 7 below.
AI Model Training:
We do NOT use your resume content or personal data to train AI models. Your data is used solely for generating recommendations for your specific resume and is not used to improve or train AI models. OpenAI processes your data according to their privacy policy and does not use your data for training their models when using their API services.
We share your personal data with the following categories of third-party service providers to operate our service:
Cloud Hosting and Database Services (Supabase): We use Supabase to store your account data, resumes, and cover letters. Supabase is a US-based service provider that hosts data in secure cloud infrastructure. Data is encrypted in transit and at rest.
AI Service Providers (OpenAI): When you use AI optimization features, your resume content and job descriptions are transmitted to OpenAI for processing. OpenAI is a US-based service provider. See Section 5 for details on AI processing.
Payment Processors (Stripe): If you subscribe to a paid plan, we use Stripe to process payments. Stripe receives payment card information (which we do not store) and billing details. Stripe is a US-based service provider.
Hosting and CDN Services (Vercel): Our application is hosted on Vercel, which may process technical data (IP addresses, request logs) in the course of providing hosting services.
Government Authorities: We may disclose personal data if required by Brazilian law, court orders, or regulatory requests from the Autoridade Nacional de Proteção de Dados (ANPD) or other competent authorities.
We Do NOT Sell Your Personal Data:
CV Sapiens does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We only share data with service providers necessary to operate our service, and all such sharing is governed by data processing agreements.
Important: International Data Transfers
Your personal data may be transferred to and processed in countries outside Brazil, including the United States, where our service providers are located.
Transfers to the United States: We use the following US-based service providers:
Supabase: Stores your account data, resumes, and cover letters. Data is stored in secure cloud infrastructure with encryption.
OpenAI: Processes your resume content when you use AI optimization features. Data is transmitted securely and processed according to OpenAI's privacy policy.
Stripe: Processes payment information for subscription billing. Payment card data is handled by Stripe and not stored by CV Sapiens.
Vercel: Hosts our application and may process technical data in the course of providing hosting services.
LGPD Safeguards: All international data transfers are conducted in compliance with LGPD requirements. We ensure that:
Service providers are bound by contractual clauses that ensure adequate data protection
Data is encrypted in transit (TLS) and at rest where possible
We only transfer data necessary for the specific service being provided
By using CV Sapiens, you consent to the transfer of your personal data to the United States and other countries where our service providers operate, subject to the safeguards described above.
We retain your personal data for the following periods:
Account Data: Retained while your account is active. If you delete your account, we will delete your account data within 30 days, except as required by law.
Resume and Cover Letter Data: Retained while your account is active. If you delete your account, we will delete all resume and cover letter data within 30 days of account deletion, except as required by law.
Financial Records: Retained for 5 years as required by Brazilian tax and accounting laws (Lei 8.404/1992 and related regulations).
Usage and Technical Data: Retained for up to 12 months for security and service improvement purposes, then anonymized or deleted.
Legal Holds: If we are subject to a legal investigation or hold, we may retain data beyond the periods stated above as required by law or court order.
You may request deletion of your data at any time by contacting us at team@contact.cvsapiens.com. We will process deletion requests within 30 days, subject to legal retention requirements.
Under LGPD, you have the following rights regarding your personal data:
Confirmation of Processing (Art. 9º, I): You have the right to confirm whether we process your personal data.
Access (Art. 9º, II): You have the right to access your personal data, including information about the purposes of processing, categories of data, and data sharing.
Correction (Art. 9º, III): You have the right to request correction of incomplete, inaccurate, or outdated data.
Anonymization, Blocking, or Deletion (Art. 9º, IV): You have the right to request anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data.
Data Portability (Art. 9º, V): You have the right to receive your data in a structured, commonly used, and machine-readable format.
Information About Sharing (Art. 9º, VI): You have the right to obtain information about public and private entities with which we share your data.
Revocation of Consent (Art. 9º, VII): You have the right to revoke consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Petition to ANPD (Art. 18º): You have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) if you believe your rights have been violated.
How to Exercise Your Rights:
To exercise any of these rights, please contact us at:
Email: team@contact.cvsapiens.com
We will respond to your request within 15 business days as required by LGPD Article 18, §1º.
We implement technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security) 1.2 or higher.
Encrypted Storage: Sensitive data, including passwords, are stored in encrypted or hashed format. Resume and cover letter data are stored in secure databases with access controls.
Access Controls: We implement role-based access controls and authentication mechanisms to ensure only authorized personnel can access personal data.
Secure Development: We follow secure coding practices and regularly update our systems to address security vulnerabilities.
Regular Security Assessments: We conduct regular security reviews and assessments to identify and address potential security risks.
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard security measures.
We use cookies and similar tracking technologies to operate and improve our service:
Essential Cookies: Required for authentication, session management, and core service functionality. These cookies cannot be disabled.
Analytics Cookies: We may use analytics services (such as Vercel Analytics) to understand how users interact with our service. This data is anonymized and used for service improvement.
Performance Cookies: Used to monitor service performance and identify technical issues.
Managing Cookies: You can control cookies through your browser settings. However, disabling essential cookies may affect your ability to use certain features of the Service.
Consent: For non-essential cookies, we obtain your consent before placing them on your device. You may withdraw consent at any time through your browser settings or by contacting us.
CV Sapiens is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately at team@contact.cvsapiens.com, and we will take steps to delete such information.
If we become aware that we have collected personal data from a minor without parental consent, we will delete that information promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of material changes by:
Posting the updated Privacy Policy on this page with a new "Last Updated" date
Sending an email notification to the address associated with your account (for material changes)
Displaying a notice within the Service
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you may stop using the Service and request deletion of your account and data.
In accordance with the Lei Geral de Proteção de Dados Pessoais (LGPD - Law 13.709/2018), we provide the following information about the data controller:
If you have questions, concerns, or wish to exercise your rights under LGPD, please contact us:
Contact Email: team@contact.cvsapiens.com
For complaints or to exercise your rights, you may also contact the Autoridade Nacional de Proteção de Dados (ANPD) at: https://www.gov.br/anpd
This Privacy Policy is effective as of the "Last Updated" date above and complies with the Lei Geral de Proteção de Dados Pessoais (LGPD - Law 13.709/2018) of Brazil.