Privacy Policy
Last updated: August 29, 2026
Scope and overview
This Privacy Policy describes how Zeviro collects, uses, stores, and protects personal data when you use the Zeviro mobile application, web application, account services, subscriptions, and AI resume studio tools. We are dedicated to transparent data practices and upholding the privacy rights of all users.
Information we collect
We collect only personal information necessary to deliver, maintain, and improve our resume creation and editing services. This includes: Account Data (email address and profile name provided via Apple Sign In, Google Sign In, or Supabase Authentication); Resume and Career Data (full name, contact details such as email, phone, location, links, professional summary, work history, employers, dates, accomplishments, education history, degrees, institutions, skills, project details, certifications, and languages); Targeting Inputs (target job titles, target companies, job descriptions, and custom editing instructions); Uploaded Documents (resume files in PDF, DOCX, or TXT format uploaded for parsing); and Transaction/Usage Data (subscription status, credit balances, purchase transaction identifiers managed via RevenueCat and Apple).
How we collect your information
Personal data is collected directly from you when you authenticate, enter background notes, upload resume files, configure formatting options, or request AI generation and refinement. Diagnostic data is collected automatically via privacy-focused, cookie-less infrastructure when interacting with our application and APIs.
Third-party artificial intelligence processing (OpenAI)
Zeviro integrates artificial intelligence services provided by OpenAI, LLC (3180 18th St, San Francisco, CA 94110, USA) to parse, extract, rewrite, enhance, and optimize resumes. • What Data is Sent: When you request resume generation or AI refinement, your submitted background details, work experience, education history, skills, target role, job description, uploaded resume files, and refinement instructions are transmitted securely to OpenAI via its commercial API. • Who It Is Sent To: OpenAI, LLC. • Purpose of Processing: To extract structured career facts from unstructured text or files, rewrite bullet points with professional impact, align content with target roles, format sections for ATS readability, and execute quality assurance checks. • Equal Protection and Security: We confirm that OpenAI, LLC provides equal or equivalent protection of personal data as required by Apple Developer guidelines and this Privacy Policy. Data is transmitted securely using industry-standard encryption (TLS 1.3/HTTPS) and processed solely to deliver the requested editorial outputs. • User Consent: Data is transmitted to OpenAI only after you initiate an AI generation or refinement action and confirm your consent in the application.
Authentication and account data
We use Apple Sign In, Google Sign In, and Supabase to provide secure authentication. Zeviro receives only the basic identifiers and profile information authorized by you. Your email address is used solely for account security, multi-device synchronization, billing verification, and deletion confirmation. We never sell, rent, or share your contact information with marketers.
Subscriptions, in-app purchases, and RevenueCat
In-app purchases and weekly subscriptions are processed directly through Apple's secure App Store billing system. We use RevenueCat to verify subscription status, manage credit allocations, restore purchases, and handle billing webhooks. RevenueCat and Apple process transaction IDs, product IDs, purchase timestamps, and subscription state. Zeviro never receives or stores your credit card or financial details.
Hosting, security, and analytics
Our backend systems and database are hosted securely on Supabase and Vercel infrastructure with multi-region encryption. Vercel Web Analytics collects privacy-first, aggregated performance metrics without using third-party tracking cookies or cross-site fingerprinting. We do not engage in cross-app tracking or sell personal information to data brokers.
Service providers and data processors
We engage a limited number of vetted service providers to deliver our core application functionality: OpenAI, LLC (artificial intelligence processing governed by commercial API terms and security safeguards); Supabase, Inc. (authentication and encrypted PostgreSQL database storage); RevenueCat, Inc. & Apple Inc. (in-app purchase verification and subscription management); and Vercel, Inc. (cloud backend hosting and performance monitoring). Each provider processes data strictly on our behalf under contractual confidentiality, data protection agreements, and platform security standards.
How we use your information
We use collected information exclusively to: (1) Authenticate your identity and sync your resume workspace securely across sessions; (2) Generate, structure, refine, and export your professional resumes as requested; (3) Calculate ATS compatibility and structural recruiter-readiness scoring; (4) Manage credit balances and verify active subscription entitlements; (5) Protect against fraud, abuse, and security vulnerabilities; (6) Provide responsive customer and technical support; and (7) Comply with applicable legal, tax, and regulatory requirements.
Data retention and deletion
We retain personal data only for as long as your account remains active or as needed to provide our services. You have complete control over your data: (1) Deleting Resumes: You can delete any resume document directly in the app at any time, which permanently removes the document and associated export files from our databases; (2) Account Deletion: You can permanently delete your entire Zeviro account at any time from Settings by confirming your email. Account deletion irreversibly purges your profile, all resume documents, credit balances, and personal records from our active database. Note that active App Store subscriptions must be canceled separately through Apple Account Settings.
Security safeguards
We implement robust administrative, technical, and physical security measures to safeguard your personal data, including HTTPS/TLS 1.3 encryption in transit, AES-256 database encryption at rest, role-based access controls, and automated rate limiting.
Your privacy rights and choices
Depending on your jurisdiction (such as GDPR in Europe, CCPA/CPRA in California, or other applicable privacy laws), you have the right to access, review, export, correct, or permanently delete your personal information, as well as the right to restrict or object to certain processing activities. You may exercise these rights directly within the Zeviro app or by contacting us via our support portal.
Policy updates and consent renewal
We may update this Privacy Policy periodically to reflect enhancements to Zeviro, changes in our service providers, or evolving legal standards. The latest version and effective date will always be accessible in the app and on our website. Whenever material changes occur, we will prompt you for renewed consent within the app.
Contact and data controller
If you have questions, feedback, or data privacy requests regarding this Privacy Policy or our third-party processing practices, please contact us through the official Zeviro website at https://zeviro.orionthcomp.tech/support.
Language and controlling version
The official, legally binding version of this Privacy Policy is in English. Any translated versions are provided solely for user convenience. In case of any discrepancy, the English version published on our official website shall govern.