Privacy Policy

1. Who we are

The data controller for the Service is the operator of NebulaCV. Contact: support@nebulacv.com.

2. Information we collect

Account and profile

When you sign in (e.g., with Google), we may receive your name, email address, and profile image from your identity provider. We store this in our systems to operate your account.

Resume and usage data

Content you create in the Service (resumes, cover letters, job descriptions you paste, chat messages to AI features) is processed and stored so we can provide editing, tailoring, export, and related features.

Technical data

We collect information such as IP address, browser type, device identifiers, approximate location (e.g., for regional features or payments), and logs for security, analytics, and service improvement.

Cookies and similar technologies

We use cookies and local storage as needed for authentication, preferences, and analytics. You can control cookies through your browser settings.

3. How we use information

• Provide, maintain, and improve the Service.
• Authenticate users and prevent fraud and abuse.
• Process payments and manage subscriptions (via payment processors).
• Send service-related messages (e.g., security, billing, product updates).
• Analyze usage in aggregate to improve features and performance.
• Comply with legal obligations and enforce our Terms of Service.

4. AI and third-party processing

To power AI features (e.g., resume parsing, tailoring, suggestions), we send relevant portions of your content to AI providers (such as Google, OpenAI-compatible APIs, or others we configure). Those providers process data under their own terms and privacy policies. We instruct them to use data only to provide the Service and do not sell your resume content to third parties for their own marketing.

5. Service providers

We use trusted subprocessors, which may include:

• Supabase — authentication and database hosting.
• Vercel — hosting and delivery of the application.
• Paddle (and, where applicable, regional payment partners) — subscription billing and tax compliance.
• Email providers (e.g., Resend) — transactional email where used.

Each provider processes data only as needed to perform services for us and is bound by appropriate agreements.

6. International transfers

We and our providers may process data in the United States, the European Economic Area, the United Kingdom, and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for transfers.

7. Data retention

We retain your information for as long as your account is active and as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. You may request deletion of your account subject to legal retention requirements.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data; object to or restrict certain processing; and withdraw consent where processing is consent-based. To exercise these rights, contact support@nebulacv.com. You may also lodge a complaint with a supervisory authority in your region.

9. Security

We implement technical and organizational measures designed to protect your information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Children

The Service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have, please contact us and we will take appropriate steps.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. For material changes, we may provide additional notice.

12. Related documents

See also our Terms of Service and Refund Policy.

This policy is for general information. It is not legal advice. Adapt contact details and subprocessors to match your actual operations.