Privacy Policy
The short version
- Your resumes and job search stay on your device. CV Workroom runs in your browser and keeps everything in a folder you choose or in the browser’s own storage. We never receive it.
- No account, no cookies, no analytics, no ads, no tracking. Every script and font the app uses comes from our own site.
- Something leaves your browser only when you choose to send it: asking an AI, adding a reminder to an online calendar, sharing a link, or reading a job posting from a job board’s link. Each is described below.
Who we are
CV Workroom is made by Domenic Padula and published at cvworkroom.com. In this policy, “we” means the maker of CV Workroom, and “the app” means CV Workroom. Questions about this policy: privacy@cvworkroom.com.
What stays on your device
Everything you write or add in CV Workroom is stored only where you choose, and we have no copy:
- Your content: resumes, cover letters, reference lists, job postings, applications and the exact copies you sent, contacts, notes, reminders, prep documents and files you attach, your answer and story bank, reviewers’ comments, and earlier versions (History).
- Where it’s kept: a folder on your computer that you pick (for example in Dropbox or OneDrive, whose own terms then apply to that folder), or your browser’s storage for this site.
- Settings: small preferences in your browser’s storage, such as your theme, the panel layout, the resume you had open, the AI you used last, which reminders you’ve seen, and that you’ve read the notice about AI for this session.
- An offline copy of the app’s own files, so it opens without a connection. It holds the app, not your content.
- An error log kept in your browser to help you report problems. It is never sent anywhere; you can copy it or clear it from the app.
The analysis features (job match, ATS readiness and the ATS check, Check your PDF, the bullet coach, writing checks, interview prep, imports including reading scanned PDFs) all run on your device.
What we receive
None of your content. The web server that delivers the app’s files to your browser keeps standard request logs, as every web server does: your IP address, browser type, the time, and which files were requested. Our hosting provider keeps them for security and to run the site. We don’t use them to identify you, combine them with anything else, or sell or share them.
We don’t use cookies, analytics, advertising, tracking pixels, or scripts and fonts from other companies.
When information leaves your browser
Only when you take one of these actions:
Asking an AI
Improve with AI and Work it in with AI open the AI service you choose (ChatGPT, Google AI Mode, Claude, Perplexity, Grok or Gemini) with a request that includes the bullet you’re improving, the job title and some keywords from the posting. You can read and change the request before sending it. That service receives it under its own privacy policy and terms; we don’t receive it. The first time in a session you choose any AI, the app asks before anything is sent. To bring the AI’s answer back, the app reads your clipboard only when you ask it to, or when you’ve given your browser permission; the answer stays on your device.
Reading a job posting from a link
When you paste a link to a posting on Greenhouse, Lever, Ashby, SmartRecruiters or Workable, your browser asks that service for the public posting. It sees your IP address and which posting was requested. Nothing about you or your resume is sent, and no cookies are used.
Calendars
Add to calendar with Google Calendar or Outlook opens their site with the event filled in: the company, the role, the time and the notes shown. A calendar file (.ics) is saved on your device instead.
Send to phone and Ask for feedback links
These links carry the resume (or the reviewer’s comments) inside the link itself, after the “#”. Browsers don’t send that part of a link to the website, so it doesn’t reach our server. Anyone who has the link can open it, and the email or messaging app you use to send it carries it under its own terms. QR codes for Send to phone are made and read on your devices; the scanner uses your camera only to read the codes and records nothing.
The Send to CV Workroom button
The bookmark button reads the job posting on the page you’re viewing and opens CV Workroom with it, from your browser to your browser.
Files you save and links you follow
Exports, backups and calendar files are saved where you choose. Password-protected backups are encrypted on your device (AES-256-GCM); we can’t recover a forgotten password. Links to other sites, such as LinkedIn or a job board, take you to those sites under their own policies.
Your choices and rights
- You can view, change, export or delete anything in the app at any time.
- To remove everything, delete your resumes in the app, delete the folder you chose, or clear this site’s data in your browser’s settings.
- Because we hold none of your content, there is nothing for us to access, correct, delete or hand over on your behalf. Privacy laws such as the GDPR and the CCPA give you rights over personal data a company holds about you; for the server logs described above, contact us and we’ll help.
- We don’t sell or share personal information, for advertising or otherwise.
Children
CV Workroom isn’t meant for children under 13 (under 16 in the European Union), and we don’t knowingly collect information from them.
Security
Your content is as safe as the device and folder it’s kept on. Use a device password, keep your browser up to date, and protect backups you share with a password.
Changes to this policy
If the app changes what it does with information, we’ll update this page and its date before the change takes effect, and mention it in the app’s What’s new.
Contact
Questions or requests: privacy@cvworkroom.com.