Privacy Policy

StellaCV is designed to be privacy-first. We collect as little data as possible and keep your resume data on your device by default. This policy explains exactly what we collect, what we don't, and why.

Resume data

Your resume content is stored in your browser's local storage. We do not have access to it, cannot read it, and do not transmit it to our servers unless you explicitly choose to create an account and enable cloud sync.

If you use cloud sync (requires a free account), your resume data is stored in a Supabase-hosted PostgreSQL database. Row-level security ensures only you can access your data. We do not share, sell, or analyze your resume content.

AI features

When you use AI-powered features (bullet suggestions, summary generation, job tailoring, cover letter generation), the relevant text from your resume is sent to third-party AI providers (Google Gemini, Anthropic Claude) to generate suggestions.

We send only the minimum text needed for the feature to work. We do not store AI prompts or responses on our servers. Please review the privacy policies of Google and Anthropic for how they handle data sent to their APIs.

Account data

Creating an account is optional. If you do, we collect your email address and password (hashed, never stored in plain text). Authentication is handled by Supabase Auth.

If you subscribe to StellaCV Pro, payment processing is handled by Stripe. We do not store your credit card number. Stripe provides us with a customer ID and subscription status.

Analytics

We may use privacy-focused analytics to understand aggregate usage patterns (page views, feature usage). We do not use Google Analytics. We do not run retargeting ads. We do not build advertising profiles from your usage.

Cookies

StellaCV uses only essential cookies required for authentication (session tokens). We do not use advertising cookies, tracking cookies, or third-party cookies for marketing purposes.

Third-party services

• Supabase – authentication and optional cloud storage
• Stripe – payment processing (Pro subscriptions only)
• Google Gemini / Anthropic Claude – AI text generation
• Vercel – hosting and edge functions
• Proxycurl – LinkedIn profile import (Pro only, when you initiate it)

Data deletion

For local-only usage, clearing your browser's local storage removes all resume data. We have nothing to delete because we never had it.

For account holders, you can delete your account and all associated data by contacting us. We will remove your data within 30 days.

Contact

Questions about this policy? Email us at privacy@stellacv.com.