Your data, explained plainly.

NobelCV is built local-first. Your draft lives in your browser until you choose to save it. This policy covers what happens when you do.

Last updated: July 2026. Operator: CapraAgentLab. Contact: support@nobelcv.com.

1. Account and authentication

Sign-in data

When you sign in with Google or email, we receive your email address and a unique user ID from our authentication provider (Supabase Auth). We do not store your Google password. Email sign-in uses secure magic links — no password is created or stored.

2. CV data

Drafts and profile photos

Your CV draft (name, headline, summary, experience, education, skills) is stored in our database only when you click "Save draft." Until then, it exists only in your browser. Profile photos are stored in secure cloud storage and linked to your draft. If you enable a public CV page, the draft content is accessible via a unique share link.

3. AI features

Quick Apply, ATS Score, tailoring, cover letters

When you use AI features (Quick Apply, ATS Score, tailoring, cover letters), your CV content and the job description you provide are sent to Anthropic (Claude) for processing. When you import an existing CV, the extracted text is sent to OpenAI to map it into the builder. In both cases we do not send your email, name, or account details — only the CV text and job description needed to generate the result. Neither provider uses this data to train models. We log each AI call (route, token count, success/error status) for usage tracking and billing — but we do not store the AI-generated output on our servers after it is returned to you.

4. Payments

Stripe handles your card

All payments are processed by Stripe. We never see, store, or handle your card number. We store your Stripe customer ID and subscription status to manage your account tier (Free, Export, or Pro). Stripe's privacy policy governs how they handle your payment data.

5. Analytics and tracking

CV views and application data

If you enable a public CV page, we track views to show you analytics: viewer country and city (from request headers), referrer URL, and IP address for deduplication. We do not identify individual viewers. Job applications you log in the Application Tracker (company, role, status, notes) are stored in our database and visible only to you.

6. Cookies and local storage

Minimal and functional

We use a single cookie to remember your language preference. Your authentication session is managed by Supabase using standard secure cookies. We use browser local storage to hold your unsaved draft. We also use privacy-friendly analytics (CapraLens and Vercel Web Analytics) to understand aggregate usage — on your first visit you can allow or decline these, and we do not load them until you consent. We do not use advertising pixels, and we never sell your data.

7. Data retention and deletion

You control your data

You can delete your account and all associated data (drafts, applications, AI usage logs, support tickets, subscriptions) from the Settings page or by contacting support@nobelcv.com. Account deletion is permanent and cannot be reversed. We retain anonymised, aggregate usage statistics after deletion.

8. Third-party services

Who else touches your data

Supabase (authentication and database hosting), Stripe (payment processing), Anthropic and OpenAI (AI text generation), Resend (transactional email), CapraDesk (support ticket handling, when you contact support), Vercel (application hosting and, with your consent, Web Analytics), and CapraLens (privacy-friendly analytics, with your consent). Each processes data under their own privacy policies. We do not sell, rent, or share your personal data with anyone else.