Last Updated: January 21, 2026
1. Introduction
Welcome to HarvCV. This Privacy Policy complements our Terms and Conditions of Use and describes how HarvCV, its affiliates, and associated services ("HarvCV", "we", or "the platform") collect, use, process, store, and protect your personal information.
Our guiding principle is non-negotiable: your data belongs to you.
We do not sell your personal information to third parties nor use the content of your documents to train public AI models.
By using the platform, you accept this Privacy Policy together with our Terms and Conditions of Use.
2. Information We Collect
Data collection varies depending on the service modality you use.
2.1. HarvCV Free (Local Mode)
Personal Data: We do not collect names, email addresses, or personal identifiers.
Documents: We do not access the content of your resumes or files. Everything is processed and stored locally in your browser, without being sent to our servers.
Analytics: We may collect anonymous technical data (device type, approximate country, system errors) exclusively to improve the stability and quality of the platform.
2.2. HarvCV Pro / Enterprise / Education
When you create an account or redeem a voucher, we collect:
- Registration Information: Email address, encrypted password, and name used.
- Documents: Resumes and texts you choose to upload or generate, encrypted in our cloud infrastructure.
- Usage Data: Interactions with the platform, session history, and technical logs needed for support, security, and abuse prevention.
3. Use of Artificial Intelligence (Luxia AI and Pro Tools)
HarvCV uses AI technologies provided by Lovable AI Gateway and Google Gemini under strict privacy standards.
- No-Training Policy: The texts, prompts, and documents you send to AI tools are NOT used to train external providers' AI models.
- Pass-Through Processing: Information is transmitted to providers only to generate responses and is not retained on their servers beyond the processing necessary.
- Temporary Storage (Luxia AI): Conversations with Luxia AI are stored temporarily to maintain session continuity. When the chat ends or the session is closed, those conversations are permanently deleted from our systems with no possibility of recovery, except where legally required.
4. Processing of Minors' Data
In compliance with our Terms and Conditions (Section 13), we apply enhanced measures for minor users who access via institutional vouchers:
- Data Minimization: We only process the information strictly necessary to provide the contracted service.
- Parental Control: Parents or legal guardians may request access to general usage data (access dates and tools used) or the full deletion of a minor's account by contacting [email protected].
- AI Restricted by Default: AI data processing for minors is disabled by default unless expressly enabled by the providing entity under its supervision.
5. Data Visibility for Entities (Enterprise / Education)
If you access HarvCV through a voucher provided by a company, university, foundation, or NGO:
What the entity CAN see:
- Email address associated with redemption.
- Redemption date.
- General usage statistics (e.g., "Active user").
What the entity can NEVER see:
- The content of your resumes.
- Conversations with Luxia AI.
- Private files.
There is an absolute technical separation between your personal content and the administrators of the providing entity.
6. Storage and Security
- Encryption: All data in transit and at rest is protected with industry-standard encryption (TLS/SSL).
- Infrastructure: We use top-tier cloud providers (e.g., Supabase/Google Cloud) that comply with international security standards (ISO 27001, SOC2).
- Retention: We keep your data only while your account remains active or a legal retention obligation exists. Deleted files or closed accounts are permanently removed unless applicable legal obligations require otherwise.
7. Sharing Information with Third Parties
We do not share your personal information with third parties, except:
- Essential Service Providers: Payment processors (Merchant of Record), cloud infrastructure, and AI gateways, all subject to data processing agreements (DPAs) that prohibit them from using your data for other purposes.
- Legal Requirement: If required by a valid court order or competent authority.
8. Your Rights (ARCO)
Regardless of your location, HarvCV guarantees you:
- Access: Know what personal data we have about you.
- Rectification: Correct inaccurate data in your profile.
- Cancellation (Right to be Forgotten): Request the complete deletion of your account and all associated data.
- Portability: Download your resumes and files in standard formats.
To exercise these rights, or if you are a parent/guardian of a minor user and wish to revoke consent, contact us at [email protected].
9. Links to External Policies
For more information about data processing by AI providers and associated services, you can consult:
- Lovable Privacy Policy: https://lovable.dev/privacy
- Lovable Data Processing Agreement (DPA): https://lovable.dev/data-processing-agreement
- Google Privacy Policy: https://policies.google.com/privacy
10. Changes to this Policy
We may update this Privacy Policy to reflect changes to our services, legal requirements, or industry best practices.
We will notify you of significant changes through the platform or by email. Continued use of HarvCV implies acceptance of the current version.