Privacy, plainly explained.
Updated September 15, 2026. This describes CVPilot’s rebuilt resume formatting service, operated by Sweet Zo’s, Inc.
What we process
We process the resume text, optional job description, and revision instructions you submit. Uploaded PDF and Word files are read to extract text; CVPilot does not keep the original uploaded file. Check the extracted text before submitting.
Your draft is stored in this tab’s session storage. Private purchase and preview access tokens can be stored in your browser’s local storage. Anyone with a private purchase link can access that purchase; keep it private.
AI processing
When you request writing improvements or an AI revision, we send your submitted text to OpenAI to help with layout and provide writing suggestions. In formatting mode, the displayed resume text comes from your input, and basic formatting does not require an AI request. API requests set storage to false; OpenAI’s own processing and retention policies also apply.
Payments and email
Stripe processes payments. CVPilot stores the checkout reference, payment status, and checkout email so it can deliver and recover your purchase. CVPilot does not receive your full card number. SendGrid delivers private purchase links. We disable email open and click tracking for these links.
Google Docs
When you choose “Save to Google Docs,” you authorize CVPilot to create a document in the Google account you select. We request the drive.file permission, which covers files used with this app, rather than access to your entire Drive. We use the access token during that export and do not store a refresh token. Your saved document belongs to you and is governed by your Google Drive sharing settings. CVPilot does not make it public.
Storage and deletion
Free preview access expires after 24 hours. Purchased files and their source text remain accessible for 30 days after payment. Expired server records are removed by a daily cleanup, so deletion can take up to another 24 hours. Temporary Google connection records expire after ten minutes. Your downloaded files and copies saved to your Google Drive remain yours until you delete them.
Payment, email provider, and support records may remain with those providers under their policies. For deletion requests or questions, email sweetzos@cvpilot.app from your purchase email address.
Site operation
Vercel hosts the service. Google reCAPTCHA helps limit automated abuse. Server logs may contain technical request information. We do not sell your resume information.
Measuring our specialist tools
CVPilot records counts of visits, tool use, prepared drafts, previews, checkouts, purchases, and full refunds by tool. Browser events use a random identifier stored for this tab’s session and a broad referral category, such as Google or social. We do not include names, contact details, document text, full referring URLs, search queries, or private access links in these analytics records. Browser measurement is skipped when Do Not Track or Global Privacy Control is enabled. We still record completed server actions such as purchases.
Daily reports cover up to 90 days. Hashed markers used to avoid counting repeated server events can remain for up to 401 days. Counts are used to improve these tools. Google Search Console provides separate aggregate reports of search impressions and clicks; it does not receive your CV content from this measurement system.