Security

Your resume contains personal information. Here’s how we keep it safe and what we promise about how it’s used.

Encryption in transit

All traffic to and from cvory.com is served over HTTPS (TLS), so your data is encrypted between your browser and our servers.

Passwords

Passwords are never stored in plain text. They are hashed with scrypt and a unique salt. You can sign in with Google instead, in which case we never handle a password at all.

Your data and AI

  • We do not sell your personal data.
  • We do not use your content to train AI models, and our AI provider does not train on data sent through its API.
  • Resume text is only sent to our AI provider when you actively use an AI feature, to generate that output.

Payments

Payments are handled by Stripe. We never see or store your full card details — only a token and your subscription status.

Deletion & control

You can delete any resume, or your entire account and all associated data, at any time from your account settings. See our Privacy Policy for full details.

Reporting a vulnerability

Found a security issue? Please email [email protected] with the details. We appreciate responsible disclosure and will respond as quickly as we can.