Privacy policy
This document is available in every interface language. The English version is the reference.
1. What is stored
Your account email, your display name, an Argon2id hash of your password, your resumes and cover letters as JSON documents, a bounded version history per resume, an audit log of security-relevant events, and a counter of AI calls per hour.
2. Where it is stored
On the server that runs this instance, in a single SQLite database file on that machine, in WAL mode. There is no third-party analytics, no advertising pixel, no session replay and no external backup copy.
3. Cookies and local storage
Exactly one cookie is set after sign-in: an opaque session identifier, HttpOnly, SameSite=Lax, and Secure when the instance is served over HTTPS. There are no marketing or preference cookies. Your interface language is kept in this browser only.
4. AI processing
When you press an AI action, the text you submitted and, for tailoring, the job description you pasted are sent to the configured DeepSeek API to produce the rewrite. Nothing leaves the server when you do not press the button. Only character counts and latency are stored.
5. Your rights
You can export every resume and cover letter as JSON from the Account page, change your password at any time, and delete your account. Deletion is immediate and irreversible: resumes, versions, letters, sessions and audit rows that point to your user id are removed.
6. Retention and contact
Data stays until you delete it. Expired sessions are purged automatically and public share links return 404 the moment you switch them off. Write to support@novaecosystem.live for any access, correction or deletion request.
Built on the NOVA Ecosystem.