Privacy policy
1. The short version
Your CV information is private by default. We collect only the information needed to provide your account and documents. We do not sell personal information.
2. Information we process
We process account details, CV and cover-letter content, product settings, and basic server logs used for security and reliability. Card providers process card details directly. For Pakistani transfers, FlowistCV stores the transaction information and receipt you submit so an administrator can verify it; complete card numbers are never requested.
3. How information is used
Information is used to operate the service, save your documents, verify local payments, provide support, secure accounts, and improve reliability. AI features send only the text needed for the requested generation to the configured provider.
4. Payment receipts
Local-payment receipts are stored in private server storage and can only be downloaded by an authenticated administrator. They are retained for payment support, fraud prevention, and accounting requirements.
5. Sharing and public links
Documents remain private unless you enable a public link. Anyone with an active public link can view that document. Disable sharing in the builder to revoke access.
6. Service providers
Shared-hosting and email providers process technical data needed to host and deliver FlowistCV. When enabled, Stripe processes international checkout data and the configured AI provider processes only text submitted for a requested writing action. Those providers apply their own privacy terms. FlowistCV does not send your entire account export to an AI provider.
7. Retention and deletion
CVs and cover letters are retained while your account is active. Password-reset links expire after 60 minutes and verification links after 24 hours. Security logs and payment records may be retained for fraud prevention, dispute handling, accounting, and legal requirements. You can export your information and permanently delete a non-administrator account from Account & Security; deletion removes saved documents and private user uploads, except records we must lawfully retain.
8. Your choices
You can edit your account documents, disable public links, download a portable JSON export, decline optional AI features, and delete your account. To ask a privacy question or exercise a right not available in the product, contact support from the email associated with your account.
9. Security
We use password hashing, hashed one-time tokens, login throttling, encrypted API credentials, CSRF protection, prepared database statements, secure session cookies on HTTPS, database-backed sessions, and role-based access controls. No online system can guarantee absolute security.
Contact
Questions can be sent to laraibkohiwala@gmail.com.