Privacy Policy

BeatTheBot ("we," "us," or "our") operates the website beatthebot.sh (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

By using BeatTheBot, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information:

Account Information

• Name and email address (provided during registration or via Google OAuth)
• Profile picture (if you sign in with Google)
• Hashed password (if you register with email)

CV and Job Data

• Uploaded CVs and resumes (PDF and DOCX files)
• Job descriptions you provide for optimization
• Optimization results and history

Payment Information

• Transaction records (amount, date, credit package purchased)
• Stripe customer ID and subscription status

We do not store your credit card number, CVC, or full payment details. All payment processing is handled by Stripe.

2. How We Use Your Data

We use the information we collect to:

• Provide and operate the BeatTheBot service
• Process and optimize your CVs using AI
• Manage your account and authentication
• Process payments and track credit balances
• Communicate with you about your account or the Service
• Improve and maintain the Service

3. AI Processing and Anthropic API

To optimize your CV, we send your CV content and the target job description to the Anthropic Claude API for processing. Important details about this:

• Anthropic does notuse data submitted through their API to train their AI models. This is explicitly stated in Anthropic's API terms of service.
• Data sent to the Anthropic API is processed solely to generate your optimization results and is not retained by Anthropic for model improvement purposes.
• We only send the minimum data necessary to perform the optimization (CV content and job description).

4. Data Storage and Security

Your data is stored and protected as follows:

• Database: Account information and optimization history are stored in a Turso (SQLite) database with encryption at rest.
• Hosting: The application is hosted on Vercel with HTTPS encryption for all data in transit.
• Files: Uploaded CVs and generated documents are stored securely with access restricted to your account.
• Passwords: Passwords are hashed using industry-standard algorithms and are never stored in plain text.

5. Cookies

We use session cookies only for authentication purposes. These cookies are essential for keeping you logged in and maintaining your session. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

6. Google OAuth

If you choose to sign in with Google, we receive only your name, email address, and profile picture from Google. We do not access your Google Drive, Gmail, contacts, or any other Google services. You can revoke BeatTheBot's access to your Google account at any time through your Google Account settings.

7. Stripe Payment Processing

All payment processing is handled by Stripe, a PCI-DSS compliant payment processor. When you make a purchase, your payment information is sent directly to Stripe and is never transmitted to or stored on our servers. We only store a Stripe customer ID and transaction records (amount, date, and package purchased). For more information on how Stripe handles your data, please refer to Stripe's Privacy Policy.

8. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We only share data with the following service providers, strictly for the purpose of operating the Service:

• Anthropic (Claude API) for AI-powered CV optimization
• Stripe for payment processing
• Vercel for application hosting
• Turso for database hosting

9. Data Retention

We retain your data for as long as your account is active. You can delete your account and all associated data at any time through your account settings. Upon account deletion, we will permanently remove all your personal information, uploaded CVs, optimization history, and any other data associated with your account within 30 days.

10. Your Rights

You have the right to:

• Access your personal data and download your information
• Correct inaccurate or incomplete information in your account
• Delete your account and all associated data at any time
• Export your data, including your uploaded CVs and optimization results
• Withdraw consent for data processing by deleting your account

To exercise any of these rights, contact us at tesic.vanja@gmail.com.

11. Children's Privacy

BeatTheBot is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Province of Quebec and the federal laws of Canada applicable therein, including Quebec's Act Respecting the Protection of Personal Information in the Private Sector. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts of Quebec, Canada.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: tesic.vanja@gmail.com

Service: BeatTheBot (beatthebot.sh)

Location: Quebec, Canada