Privacy Policy

Your resume and job-search activity are private. We don't sell your data, we don't train public AI models on your private resume without your explicit consent, and you can delete your data from this product whenever you want. KernCV is free: there are no payments, so we never ask for or store card details.

KernCV is run by Chakradhar Pulipelly, an independent designer based in Texas, United States. For anything about your data, write to kerncv-support@googlegroups.com.

What you give us: the resume you upload or paste, the edits you make, any job descriptions you add, and the cover letters and analyses you generate.

Your account: your email address and, if you sign in with Google, your name and profile picture. We never see your Google password.

How the product is used: events such as “a resume was imported” or “a PDF was downloaded”, counts of AI actions for fair-use limits, and standard technical logs. These never contain your resume text, job descriptions, or generated content.

You can upload a resume and edit it before creating an account. To do that we start a temporary guest session and store your resume the same private way we would for an account.

If you sign in, that resume moves into your account. If you don't, the guest session and everything in it, including the uploaded file, is deleted automatically about 48 hours after it started.

We do not sell, rent, or share your resume, job descriptions, or personal information for advertising or marketing purposes.

We do not use your private resume content to train public or third-party AI models unless you give explicit, opt-in consent. You can withdraw that consent later.

Some features use AI: Smart Import, writing suggestions, the AI job match, and cover letter drafting. When you choose to run one of these, your resume text, the job description text, and relevant context are sent to our AI providers to generate the result.

This only happens after you give consent at your first AI action. If you don't consent, AI features stay off and the rest of the product still works, including a basic import that doesn't use AI. Our AI providers are listed below.

Your resume files and content are stored privately and scoped to your account or guest session. They are not made public, and other users cannot access them. Data is stored primarily in the United States.

We use a small number of cookies and browser storage entries: to keep you signed in, to run the check that tells people from automated programs, and for the product analytics described above. We don't use advertising cookies and we don't track you across other websites.

We email you a sign-in link when you ask for one. We don't send marketing email.

You choose what to save. You can delete your resumes, analyses and cover letters, and you can delete your entire account, which removes your data from this product's own storage.

You can also ask for a copy of your data, or ask us to correct it, by email. We'll respond within seven days. These options are open to you wherever you live.

We rely on a small number of trusted providers to operate the product. Each keeps limited records under its own policies, which we don't control:

• Supabase — Account sign-in, the database, and private file storage for uploaded resumes. Your account, resumes and files are stored here and are removed when you delete them or delete your account. Supabase privacy policy.
• Google (Sign in with Google) — Signing in with your Google account, if you choose that option. We receive only your name, email address and profile picture. Google keeps its own record of the sign-in under its policy. Google (Sign in with Google) privacy policy.
• Google (Gemini API) — AI processing for resume import, writing suggestions, job matching, and cover letters (primary AI provider). Resume and job-description text is sent for AI processing only after you enable AI features, and is handled under Google's Gemini API terms. Google (Gemini API) privacy policy.
• Anthropic (Claude API) — The same AI processing as our primary AI provider, used automatically as a backup when the primary provider is temporarily unavailable. Anthropic does not use API data to train its models by default and retains API inputs and outputs for a limited period for trust and safety. Anthropic (Claude API) privacy policy.
• Resend — Transactional email (e.g. sign-in links). Email delivery logs are retained by Resend to operate and secure email sending. Resend privacy policy.
• PostHog — Privacy-conscious product analytics. Analytics events are deleted or anonymized when you delete your account. We never send your resume text, job descriptions, or generated content to analytics. PostHog privacy policy.
• Cloudflare (Turnstile) — Checking that a visitor is a person and not an automated program, before a session starts. Cloudflare processes technical signals from your browser for this check under its own policy. We do not receive them. Cloudflare (Turnstile) privacy policy.
• Upstash — Rate limiting, to protect the service from abuse. Short-lived counters keyed by account or network address. They expire automatically and contain no resume content. Upstash privacy policy.
• Vercel — Hosting the website and running its server code. Vercel keeps standard technical request logs for a limited time under its own policy. Vercel privacy policy.

KernCV is for people aged 16and over. We don't knowingly collect data from anyone younger. If you believe a child has used it, tell us and we'll delete their data.

If how we handle data changes, we'll update this page and the “Last updated” date. Questions? Write to kerncv-support@googlegroups.com.