Legal
Privacy Policy
Last updated: 19 March 2026
At LintCV, we are committed to protecting your privacy and being transparent about how we handle your data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.
1. Information We Collect
1.1 Account Information
When you create an account on LintCV, we collect your name, email address, and password (stored in hashed form). We also store email verification tokens, password reset tokens (hashed, with expiration), and multi-factor authentication (MFA) secrets if you enable two-factor authentication.
1.2 Resume & Job Description Data
When you use our analysis service, you upload your resume (PDF or DOCX) and paste a job description. We extract text content from your resume to perform the AI analysis. Your resume files and job descriptions are stored securely in our database so you can access your past analyses from your dashboard.
1.3 Payment Information
We do not store your credit card or payment details directly. All payment processing is handled by iyzico, a PCI DSS-compliant payment processor. We only store transaction IDs, order status, and purchase amounts for our records.
1.4 Usage Data
We automatically collect certain information when you visit our platform, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data helps us improve our service and troubleshoot issues.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and maintain our resume analysis service
- To process your subscription and manage your account
- To send you important service-related notifications (e.g., password reset, purchase confirmation)
- To improve our AI analysis algorithms and overall service quality
- To detect, prevent, and address technical issues and security threats
- To comply with legal obligations
We do not use your resume content for training AI models. Your personal documents remain your own.
3. Data Sharing & Third Parties
We do not sell, rent, or trade your personal information to third parties. We share data only with the following service providers who are necessary to operate LintCV:
Service Providers
- MongoDB Atlas: Database hosting (encrypted at rest and in transit)
- iyzico: Payment processing (PCI DSS Level 1 compliant)
- OpenAI / Anthropic: AI analysis processing (resume text is sent for analysis; see their respective privacy policies for data handling)
We may also disclose your information if required by law, court order, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4. Data Security
We take the security of your data seriously and implement industry-standard measures to protect it:
- All data is transmitted over HTTPS (TLS 1.2+)
- Passwords are hashed using bcrypt with salt rounds
- Database connections are encrypted and access is restricted
- Payment processing uses 3D Secure authentication and 256-bit SSL encryption
- JWT tokens are used for session management with secure expiration policies
- Regular security audits and dependency updates
While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
We retain your account information and analysis history for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes (e.g., transaction records for tax compliance).
Uploaded resume files are retained as part of your analysis history. You can delete your account at any time from the Settings page in your dashboard. Upon deletion, all your personal data, analyses, and uploaded files are permanently removed.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to certain types of data processing
- Restriction: Request restriction of processing in certain circumstances
To exercise any of these rights, please contact us at privacy@lintcv.com. We will respond to your request within 30 days.
7. Cookies
We use essential cookies to maintain your session and authentication state. We do not use advertising or third-party tracking cookies. For more details, please see our Cookie Policy.
8. Children's Privacy
LintCV is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.
9. International Data Transfers
Your data may be processed and stored in servers located outside your country of residence, including in the United States and European Union. By using LintCV, you consent to the transfer of your information to these locations. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of LintCV after any changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacy@lintcv.com
- Support Page: /support