Privacy policy
Last updated: 20 May 2026
This policy explains what Adaptly collects, why, where it lives, and how to remove it. It applies to adaptly.cv and the authenticated app at app.adaptly.cv.
1. What we collect
- CV file (PDF or DOCX) you upload, plus the text and structured data parsed from it.
- Job description text and any role, company, or notes you enter when saving a job.
- Tailoring output — the rewritten CV JSON, ATS analysis, and change notes returned by the AI model.
- Account data via Supabase Auth: email address, and — if you sign in with Google — your Google profile name and avatar.
- Billing data if you upgrade to Pro: Stripe customer ID and subscription status. Card details are handled by Stripe directly and never touch our servers.
- Abuse-prevention signals: hashed IP address and an optional hashed browser fingerprint, used only to rate-limit free-tier tailoring. The raw IP is never stored.
2. How it is stored and protected
All content above is stored in Supabase (Postgres database and private storage buckets) and is protected by row-level security — your rows are visible only to your authenticated session. Data is encrypted in transit (TLS) and at rest. We do not share your CV or job content with anyone outside the processors listed below.
3. Sub-processors
- Supabase — authentication, database, file storage.
- Vercel — hosting and request routing.
- OpenAI— résumé parsing and tailoring via the API. Per OpenAI's API policy, your content is not used to train their models.
- Stripe — payment processing for Pro plans.
4. What we don't do
- We do not sell your data.
- We do not use your CV or job content to train AI models.
- We do not send marketing email unless you opt in explicitly.
5. Retention and deletion
Your saved jobs and tailorings remain available under your account until you delete them. You can delete individual jobs from the Jobs page and individual tailorings from the Tailorings page. To delete your account and all associated data, email support@adaptly.cv from the address on your account — we remove all rows and files within 30 days and confirm by reply.
6. Your rights
If you are in the EEA, UK, or California, you have the right to access, correct, export, or delete your personal data. Email support@adaptly.cv and we will respond within 30 days.
7. Cookies
We use only the cookies required to keep you signed in (Supabase Auth session) and to remember your billing context. No third-party advertising or analytics cookies are set.
8. Children
Adaptly is not directed at children under 16 and we do not knowingly collect data from them.
9. Changes
We will update this page when the service changes. Material changes will be announced via email to signed-in users.
10. Contact
Questions or requests: support@adaptly.cv or via the contact form.