Privacy Policy

This Privacy Policy describes how Victor Chasex Pvt Ltd (“we,” “us,” or “our”) collects, uses, and protects your information when you use https://freefreecv.com (the “Service”). FreeFreeCV is a free AI-powered resume builder. We do not charge users, do not process any payments, and do not sell your data to anyone.

1. Information we collect

When you create an account:

• Email address (from Google sign-in or password sign-up)
• Name (from your Google profile or what you enter)
• Profile photo (only if you sign in with Google)

When you build a resume:

• Resume content you enter (work history, education, skills, projects, certifications)
• Templates and customizations you select
• Resumes you save to your account

Automatic technical data:

• IP address (used for rate limiting and abuse prevention)
• Login timestamps
• Resume download counts (we apply daily limits per user)
• AI feature usage (number of AI calls per user)
• Browser type and basic device info from standard HTTP headers

2. How we use your information

• Authenticate you and keep you signed in
• Save your resumes for later editing
• Generate PDFs of your resume on demand
• Provide AI-powered features (summary generation, ATS scoring, skill suggestions, job-description matching)
• Enforce rate limits and prevent abuse
• Send account-related emails (verification codes, security notices)
• Improve the Service

We do not sell, rent, or trade your personal information. We do not run advertising on the Service and we do not share your data with advertisers, data brokers, or third parties for marketing.

3. Third-party services we use

The Service relies on these third parties to function:

• Google (Sign-in with Google) — when you authenticate via Google, you share your email, name, and profile photo with us. Google's privacy policy applies: policies.google.com/privacy
• OpenRouter — for AI features. When you use AI tools (summary, ATS score, skill suggestions, job match), the relevant snippet of your resume content is sent to OpenRouter, which routes the request to AI model providers. OpenRouter's privacy policy: openrouter.ai/privacy
• Cloudflare — for content delivery and DDoS protection. Cloudflare may receive your IP address. Privacy policy: cloudflare.com/privacypolicy
• qpdf — our internal PDF rendering service. Resume content is sent for PDF generation; generated PDFs are deleted from our servers after 30 days.

We do not share your resume content with any party except as needed to fulfill a request you triggered (e.g., generating a PDF or running an AI feature).

4. Cookies

We use only cookies that are strictly necessary:

• Authentication cookie (Auth.js session token) — stores your sign-in state. Cannot be disabled while signed in.
• Cloudflare cookies — set by Cloudflare for security and bot detection.

We do not use advertising, marketing, or third-party tracking cookies.

5. Data retention

• Account data is retained for as long as your account exists.
• Resume content is retained until you delete it.
• Generated PDFs are stored on our servers for up to 30 days, then deleted.
• Server logs (IP, AI usage metadata) are retained for 90 days.

If you delete your account, all your personal data and resumes are deleted from our active systems within 30 days. Backups are rotated within 90 days.

6. Your rights under the DPDP Act, 2023

Under India's Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to correction — ask us to correct inaccurate or outdated data
• Right to erasure — request deletion of your account and all associated data
• Right to grievance redressal — raise concerns directly with our grievance officer (see Contact below)
• Right to nominate — appoint another individual to exercise your rights in case of incapacity

To exercise any right, email support@freefreecv.com. We will respond within 30 days.

7. Children's privacy

The Service is not intended for users under 18. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

8. Security

We use industry-standard measures:

• Passwords hashed with bcrypt (cost factor 12) — we never store plain-text passwords
• TLS encryption in transit (HTTPS via Cloudflare)
• Rate limiting via Redis to prevent abuse
• Limited internal access to production systems
• Email verification (one-time code) before allowing password sign-in

No system is 100% secure. If we discover a breach affecting your data, we will notify you and the relevant authorities as required by the DPDP Act.

9. Where your data is stored

Our primary servers are located outside India. By using the Service, you consent to your data being transferred to and processed at these locations. We apply the same protections regardless of where data is stored.

10. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated via email to your registered address, or via a banner on the Service. The “Last updated” date at the top reflects the most recent change.

11. Contact & grievance officer

Victor Chasex Pvt Ltd
Grievance Officer / Data Contact
Email: support@freefreecv.com
Website: https://freefreecv.com

See also our Terms of Service.