Legal & Trust
Policies
Terms & Conditions
The rules for using StructuredCV, plans, billing and liability.
Privacy & Cookies
What we store, what stays in your browser, and the only cookies we use.
Refund policy
Cancel anytime, and a 14-day refund on your first payment.
DMCA & Copyright
How to report copyright infringement and file a counter-notice.
How we handle your data
StructuredCV is local-first. Your Fact Bank, resumes, job descriptions, pipeline and API keys are saved in your browser. Our database holds your account, plan and monthly usage counts. When you use an AI feature, the text for that request passes through our server to the AI provider and is not stored. We do not sell personal data, show ads or use your content to train models. Details are in the privacy policy.
| Provider | Purpose | Data involved |
|---|---|---|
| Cloudflare | Hosting, database, security, request logs | Account, plan and usage data; request metadata |
| Lemon Squeezy | Payments, tax and receipts (merchant of record) | Billing details you enter at checkout |
| Google, GitHub | Sign-in | Name, email, profile picture |
| OpenRouter or your chosen AI provider | Processing AI requests | The text of each AI request |
| jsDelivr | Font downloads for Chinese, Japanese and Korean PDFs | Your browser’s IP address |
Security
- All traffic uses HTTPS with HSTS, and the site sends a strict Content Security Policy and frame protections.
- Sign-in uses Google or GitHub, so we never store passwords. Session cookies are HttpOnly and Secure.
- Your resumes, Fact Bank and API keys stay in your browser; AI request content is not stored on our servers.
- Payment webhooks are verified with HMAC signatures, de-duplicated and checked for order.
- The job-link importer refuses private and internal network addresses and checks every redirect.
- Built-in AI is rate-limited per account, and deleting your account cancels its subscription first.
Reporting a vulnerability
Email support@structuredcv.com with the subject “Security report”, the steps to reproduce and the impact. Please give us reasonable time to fix the issue before disclosing it, and do not access other people’s data, degrade the service or use social engineering. We will acknowledge your report and keep you updated. Our security.txt has the same details in machine-readable form.
AI and truthfulness
StructuredCV uses large language models to extract information from your documents and job descriptions and to rewrite your resume. You choose the provider with your own key, or use our built-in AI on Pro. Tailoring is limited to facts in your Fact Bank: a rewritten bullet that names a required tool you never listed is reverted, the skills section only lists skills you entered, and missing requirements are shown as gaps. AI output can still be wrong, so you review every document before you use it.
Accessibility
We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA. The app and site are keyboard accessible, include skip links and labeled controls, support dark mode and respect reduced-motion settings, and every release is checked with automated WCAG A and AA tests. Features that use the microphone also accept typed answers.
Known limitation: exported PDFs are not tagged for screen readers. If you use a screen reader, the DOCX export is the more accessible format. If something is hard to use, contact us and we will help and fix it.
Company information
StructuredCV is operated by Ayoub Zulfiqar, governed by the laws of the jurisdiction where the operator is established. Contact: support@structuredcv.com.