Privacy Policy

This Privacy Policy applies to Credraft’s website and application. It describes the information processed to provide account access, public professional research, evidence review, CV creation, and related product operations.

We collect only the information needed to operate the service and provide the features you choose to use.

• Account information supplied by your authentication provider, such as your name, email address, and profile image.
• Identity details and public source URLs you intentionally submit for professional research.
• CV content, reviewed findings, edits, template preferences, and other information you save.
• Public professional information returned from approved search and research providers, together with its source and confidence data.
• Limited technical and security information needed to maintain sessions, diagnose errors, and protect the service.

When you choose Sign in with Google, Credraft uses Google Authentication through Firebase to receive the basic account information needed to create and secure your Credraft account. This may include your Google account identifier, name, email address, and profile image. Credraft does not request access to Gmail, Google Drive, contacts, calendars, or other Google product content.

• Google account data is used only for authentication, account identification, session security, and displaying your account profile inside Credraft.
• Credraft does not sell Google user data or use it for advertising.
• Credraft does not transfer Google user data to unrelated third parties. Firebase and hosting infrastructure process it only as needed to provide and secure the service.
• You can stop future access by disconnecting Credraft from your Google Account permissions. You may also request deletion of the corresponding Credraft account data by contacting hello@credraft.com.
• Credraft’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

We use information to authenticate you, operate your workspace, find and organize relevant professional evidence, let you verify findings, create CV documents, maintain security, and improve service reliability.

• Credraft does not silently add research findings to your finished CV.
• Email addresses and phone numbers found during public research are excluded and are not used to populate your CV.
• Your CV content is not automatically published.

When you explicitly start discovery, Credraft may submit the identity details and public sources you provided to the configured search and AI providers. Results are treated as unverified until you accept or edit them. Provider processing is also subject to the provider’s own terms and privacy practices.

• Searches prioritize the complete name and supporting professional context you provide.
• Credraft stores evidence excerpts, source links, confidence information, and structured professional details needed for review.
• Raw model responses are not intentionally stored as part of your CV document.
• Sensitive personal attributes and personal contact details are excluded from research instructions.

Credraft may use infrastructure, authentication, database, search, and AI service providers to operate requested features. Information is disclosed only as needed to provide those services, protect users, comply with law, or respond to valid legal process. Credraft does not sell personal information.

CVs, findings, sources, and documents are retained while they remain in your account or as reasonably needed to operate and secure the service. You can delete eligible CVs from the product. Some limited records may be retained when required for security, fraud prevention, legal compliance, or backup recovery.

You control whether research starts, which findings are accepted, what appears in the editable CV, and whether an eligible CV is deleted. You may correct CV content independently from its evidence record. To request help with access, correction, or deletion that is not available in the product, contact us.

Credraft uses authenticated sessions, owner-scoped data access, server-side authorization, validated public URLs, and restricted browser writes. No online service can guarantee absolute security, so you should also protect your sign-in account and devices.

Credraft is a professional CV service and is not directed to children under the age required to consent to online services in their jurisdiction. Do not submit information about minors for public professional research.

We may update this policy as Credraft evolves. The effective date will be revised when material changes are published. Continued use after an update means the revised policy applies to subsequent use of the service.

For privacy questions or requests, contact hello@credraft.com. Please do not send passwords, authentication tokens, or highly sensitive personal information by email.