Privacy Policy

1. Information We Collect

We collect information in three ways when you use Tavorax:

• Account Registration: When you sign up, we collect credentials such as your email address, full name, password hash, or OAuth profile metadata (when registering via Google).
• Document & Resume Data: Work history, education details, skills, contact information, and target job descriptions entered into the Resume Builder or uploaded for conversion.
• AI Request Data & Usage Logs: Text snippets (resumes, job descriptions, bullet points) sent to our AI engines, alongside technical request metadata (timestamp, user ID, feature group, and response status) stored to enforce fair-use rate limits.

2. How We Use Information & AI Processing

We process collected data to achieve the following outcomes:

• Deliver core services such as PDF compilation, document format conversion, and custom QR code creation.
• Power intelligent AI tools: generating executive summaries, optimizing resume bullets, computing ATS compliance scores, and tailoring cover letters.
• Enforce fair-use rate limits and daily AI quotas (e.g. 10/day for Resume Builder, 5/day for ATS Scanner & Cover Letter Generator) to ensure equitable access across all users.
• Persist your created resumes and document drafts so you can log back in and resume edits seamlessly.
• Maintain system security, investigate conversion crashes, and manage support tickets.

3. Third-Party AI Providers & Zero-Training Guarantee

We do not sell, rent, or lease your personal information, resume content, or document uploads to third parties or advertisers.

We share data strictly with trusted infrastructure providers required to operate Tavorax:

• AI Infrastructure Providers (Google Gemini, Groq, Cloudflare): Text prompts are transmitted via encrypted API gateways solely to compute real-time suggestions and ATS analysis in transient memory.
• Zoho Desk: If you submit a support ticket via our portal, your ticket fields are shared with Zoho Desk to manage communications.
• Cloud Storage & Database Infrastructure: Encrypted data persistence on isolated PostgreSQL and cloud storage buckets.

4. Data Retention Limits

Converted Files: Converted documents are retained temporarily in cache storage to enable immediate downloads. These files are permanently purged automatically within 24 hours.

Account Data & Resumes: We store account profiles and generated resumes for as long as your account remains active. You can request deletion of your account and files at any time.

5. Security Safeguards

We employ standard security protocols (including TLS/SSL data-in-transit encryption, hashed passwords, database access firewalls, and isolated backend service environments) to protect against unauthorized data modifications, leakage, or loss.

6. Your Privacy Rights

Depending on your jurisdiction (such as GDPR, CCPA), you hold legal rights regarding your personal information:

• Access: The right to request copies of stored details.
• Correction: The right to update inaccurate fields.
• Erasure: The right to request permanent deletion of your profile database entries and files.

To exercise any rights, contact us at the compliance address below.

7. Cookies & Local Storage

We use secure cookies and browser Local Storage parameters to handle authentication tokens, remember session details, and persist dashboard settings. These do not harvest advertising footprints. You can configure your browser to block cookies, though some features may break.

8. Changes to Policy

We may revise this Privacy Policy from time to time. Updates will be highlighted by updating the date header at the top of the policy page.