Privacy Policy

Last updated: February 18, 2026

1. Introduction

Zektav ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

  • Name and email address
  • Password (stored securely using bcrypt hashing)
  • Account preferences and settings

Resume Data

  • Personal information (name, contact details, location)
  • Employment history and job titles
  • Education and qualifications
  • Skills, certifications, and projects
  • Professional summary

Usage Data

  • Job descriptions you analyze
  • Analysis results and scores
  • Cover letters generated
  • Application tracking data
  • Service usage patterns and timestamps

Payment Information

Payment processing is handled by our secure payment provider. We do not store your full credit card number. We receive and store only: last 4 digits, card type, and a secure customer reference ID.

3. How We Use Your Information

  • Provide the Service: Create and store your resumes, perform AI analysis, generate content
  • Improve the Service: Analyze usage patterns to improve features and user experience
  • Communications: Send transactional emails (password resets, receipts, important updates)
  • Security: Protect against fraud and unauthorized access
  • Legal Compliance: Comply with applicable laws and regulations

4. Third-Party Services

We share your data with the following third parties only as necessary to provide the Service:

AI Processing

Resume content and job descriptions are sent to AI providers for analysis and optimization. This data is processed according to their privacy policies and not used to train AI models.

Payment Processing

Payment information is processed securely by our payment provider.

Cloud Hosting & Infrastructure

Your data is stored on secure cloud infrastructure with encryption in transit and at rest.

We do not sell your personal data. We do not share your data with advertisers or data brokers.

5. Data Storage and Security

  • Data is stored in PostgreSQL databases on secure cloud infrastructure
  • All data transmission uses TLS/SSL encryption
  • Passwords are hashed using bcrypt with a cost factor of 12
  • Access to production systems is restricted and logged
  • Regular security audits and updates are performed

6. Data Retention

Active accounts: Data is retained for as long as your account is active.

Deleted accounts: When you delete your account, all personal data is permanently removed within 30 days.

Backups: Backup data may be retained for up to 90 days for disaster recovery purposes.

7. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Delete your account and all associated data
  • Portability: Export your data in a machine-readable format
  • Objection: Object to certain processing of your data

To exercise these rights, visit your Settings page or contact us at [email protected].

8. CCPA Rights (California Residents)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know whether personal information is sold or disclosed
  • Right to opt-out of the sale of personal information (we do not sell your data)
  • Right to request deletion of personal information
  • Right to non-discrimination for exercising these rights

9. GDPR Rights (EU Residents)

If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR):

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

Our legal basis for processing your data is: (a) your consent, (b) performance of contract, and (c) legitimate interests in providing and improving the Service.

10. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

11. Cookies

We use essential cookies for:

  • Session management and authentication
  • Security and fraud prevention

We do not use advertising or tracking cookies.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email at least 30 days before they take effect. The "Last updated" date at the top indicates when changes were made.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: [email protected]

Company: Zektav

← Back to Home