Privacy Policy

1. Introduction

At Crezumic ("we", "our", or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at www.crezumic.com.

By using the Service, you consent to the practices described in this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you register, or your Google profile information when you sign in with Google
• Profile Data: Bio, avatar, and settings you configure
• Resume & Portfolio Content: Personal details, work experience, education, skills, and other information you add to your resumes and portfolios
• Application Data: Job applications, company names, statuses, and notes you track

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with the Service
• Device Information: Browser type, operating system, and device identifiers
• Analytics Data: Portfolio view counts, visitor locations (anonymized), and traffic sources

2.3 Information from Third Parties

• Google OAuth: When you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide, maintain, and improve the Service
• Generate and host your resumes and portfolios
• Track and display analytics for your portfolios
• Provide AI-powered content suggestions
• Send important service-related notifications
• Detect, prevent, and address technical issues or abuse
• Comply with legal obligations

4. Data Sharing & Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

• Public Portfolios: If you publish a portfolio, the content you choose to include will be publicly accessible
• Service Providers: We use third-party services (hosting, database, AI) that process data on our behalf under strict confidentiality agreements
• Legal Requirements: We may disclose information if required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction

5. Data Storage & Security

Your data is stored securely using MongoDB Atlas with encryption at rest and in transit. We use industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Bcrypt hashing for passwords (never stored in plain text)
• JWT-based authentication with token expiration
• Regular security reviews and updates

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Google OAuth & Third-Party Authentication

When you use "Continue with Google," we use Google's OAuth 2.0 service to authenticate your identity. We receive:

• Your Google account name and email address
• Your Google profile picture (if available)

We do not receive access to your Google Drive, Gmail, contacts, or any other Google services. You can revoke Crezumic's access at any time in your Google Account Settings.

7. Cookies & Local Storage

We use browser local storage to maintain your authentication session (JWT token). We do not use tracking cookies for advertising purposes. Third-party services integrated into the platform may use their own cookies subject to their privacy policies.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correct: Update or correct inaccurate information via your account settings
• Delete: Request deletion of your account and all associated data
• Export: Download your resumes and portfolio data
• Withdraw Consent: Opt out of optional data collection at any time

To exercise any of these rights, contact us at support@crezumic.com or use the account deletion feature in your settings.

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days, except where we are legally required to retain certain information.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If we discover that we have collected data from a child under 13, we will delete it promptly.

11. International Data Transfers

Your data may be stored and processed in countries outside your country of residence. By using the Service, you consent to the transfer of your data to these locations, where data protection laws may differ from those in your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. We encourage you to review this page periodically for the latest information.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: