Privacy Policy

This Privacy Policy applies to Credraft’s website and application. It describes the information processed to provide account access, public professional research, evidence review, CV creation, and related product operations.

We collect only the information needed to operate the service and provide the features you choose to use.

• Account information supplied by your authentication provider, such as your name, email address, and profile image.
• Identity details and public source URLs you intentionally submit for professional research.
• CV content, reviewed findings, edits, template preferences, and other information you save.
• Public professional information returned from approved search and research providers, together with its source and confidence data.
• Limited technical and security information needed to maintain sessions, diagnose errors, and protect the service.

We use information to authenticate you, operate your workspace, find and organize relevant professional evidence, let you verify findings, create CV documents, maintain security, and improve service reliability.

• Credraft does not silently add research findings to your finished CV.
• Email addresses and phone numbers found during public research are excluded and are not used to populate your CV.
• Your CV content is not automatically published.

When you explicitly start discovery, Credraft may submit the identity details and public sources you provided to the configured search and AI providers. Results are treated as unverified until you accept or edit them. Provider processing is also subject to the provider’s own terms and privacy practices.

• Searches prioritize the complete name and supporting professional context you provide.
• Credraft stores evidence excerpts, source links, confidence information, and structured professional details needed for review.
• Raw model responses are not intentionally stored as part of your CV document.
• Sensitive personal attributes and personal contact details are excluded from research instructions.

Credraft may use infrastructure, authentication, database, search, and AI service providers to operate requested features. Information is disclosed only as needed to provide those services, protect users, comply with law, or respond to valid legal process. Credraft does not sell personal information.

CVs, findings, sources, and documents are retained while they remain in your account or as reasonably needed to operate and secure the service. You can delete eligible CVs from the product. Some limited records may be retained when required for security, fraud prevention, legal compliance, or backup recovery.

You control whether research starts, which findings are accepted, what appears in the editable CV, and whether an eligible CV is deleted. You may correct CV content independently from its evidence record. To request help with access, correction, or deletion that is not available in the product, contact us.

Credraft uses authenticated sessions, owner-scoped data access, server-side authorization, validated public URLs, and restricted browser writes. No online service can guarantee absolute security, so you should also protect your sign-in account and devices.

Credraft is a professional CV service and is not directed to children under the age required to consent to online services in their jurisdiction. Do not submit information about minors for public professional research.

We may update this policy as Credraft evolves. The effective date will be revised when material changes are published. Continued use after an update means the revised policy applies to subsequent use of the service.

For privacy questions or requests, contact hello@credraft.com. Please do not send passwords, authentication tokens, or highly sensitive personal information by email.