Privacy Policy

Effective Date: 2026-02-28

1. Introduction

Welcome to Lifted CV ("we," "us," or "our"), a product of KrisCodes2 LLC. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at liftedcv.com and our related services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please discontinue use of our Service immediately.

Data Controller: KrisCodes2 LLC, United States. Contact: hr@liftedcv.com

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register for the Service, create or upload resumes, use our job search features, or otherwise contact us.

2.1 Information You Provide Directly

  • Identity Data: Name, email address, phone number, username, and password.
  • Professional and Resume Data: Employment history, job titles, education, skills, certifications, accomplishments, and salary history.
  • Job Search Preferences: Target role, employment type, desired salary range, preferred location, willingness to relocate, and career status.
  • Payment Data: When you subscribe to a paid plan, payment information is collected and processed directly by Stripe, Inc. We do not store your credit card number, CVV, or full card details on our servers. We retain only the last four digits of your card number, card brand, expiration date, and billing email for subscription management purposes.
  • Communications: Information you provide when you contact us for support or send us feedback.

2.2 Information Collected Automatically

  • Device and Technical Data: IP address, browser type, operating system, device identifiers, and screen resolution.
  • Usage Data: Pages visited, features used, time spent on pages, clickstream data, and referring URLs.
  • Cookies and Similar Technologies: We use cookies, local storage, and similar technologies as described in our Cookie Policy.

2.3 Information From Third Parties

  • Social Login Data: If you register or log in using a social media account (such as Google or LinkedIn), we may receive your name, email address, profile picture, and public profile information as authorized by the social media provider.
  • Job Search Data: When you use our job search features, we aggregate job listing data from third-party sources including LinkedIn, Indeed, Glassdoor, and other job boards. We do not share your personal data with these platforms unless you explicitly apply for a job through their service.

3. How We Use Your Information

We use the information we collect for the following purposes and legal bases:

  • To provide and maintain the Service (legal basis: contract performance) -- creating and managing your account, generating and storing resumes, facilitating job searches, and processing payments.
  • To improve and personalize the Service (legal basis: legitimate interest) -- analyzing usage patterns, tailoring job recommendations, optimizing resume suggestions, and enhancing user experience.
  • To communicate with you (legal basis: contract performance / legitimate interest) -- sending service-related notifications, responding to inquiries, and providing customer support.
  • To process payments (legal basis: contract performance) -- managing subscriptions, processing charges, and issuing receipts through our payment processor Stripe.
  • To comply with legal obligations (legal basis: legal obligation) -- responding to lawful requests by public authorities, maintaining records as required by tax and accounting laws.
  • To protect our rights and prevent misuse (legal basis: legitimate interest) -- detecting fraud, enforcing our terms, and protecting the security of our Service.

4. Third Parties We Share Data With

We do not sell your personal data. We share your information only with the following categories of third parties, and only as necessary to provide our Service:

  • Cloud Infrastructure: Amazon Web Services (AWS) hosts our application infrastructure, databases, and file storage. AWS acts as a data processor and is certified under the EU-US Data Privacy Framework. Data is encrypted at rest and in transit.
  • Authentication: AWS Cognito manages user authentication and session tokens.
  • Payment Processing: Stripe, Inc. processes all payment transactions. Stripe is PCI DSS Level 1 certified. Stripe may collect device fingerprints and behavioral data for fraud prevention. Stripe's use of your data is governed by Stripe's Privacy Policy.
  • Job Search APIs: We aggregate job listings from third-party APIs (LinkedIn, Indeed, Glassdoor, and others). These integrations are server-side and do not share your personal data with these providers unless you explicitly submit an application through their platform.
  • Legal and Safety: We may disclose your information if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

5. International Data Transfers

Our Service is hosted on AWS infrastructure located in the United States. If you are accessing our Service from outside the United States, including from the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, please be aware that your data will be transferred to, stored, and processed in the United States.

For transfers from the EEA and UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, and our infrastructure provider AWS participates in the EU-US Data Privacy Framework. By using our Service, you consent to this transfer, storage, and processing.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this Policy:

  • Account and resume data: Retained for the duration of your account. Deleted within 30 days of account deletion, subject to backup retention (up to 90 days).
  • Payment and billing records: Retained for 7 years after the transaction to comply with tax and accounting requirements.
  • Usage and analytics data: Retained in de-identified form for up to 24 months.
  • Support communications: Retained for up to 3 years after the last interaction.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how our Service is used. For detailed information about the cookies we use, their purpose, and how to manage them, please see our Cookie Policy.

8. Your Rights Under GDPR (EEA and UK Residents)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Right to Restriction: Request that we limit how we process your data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interest or for direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
  • Right to Complaint: Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at hr@liftedcv.com. We will respond within 30 days.

9. Your Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with the following rights:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the third parties with whom we share it.
  • Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information: Request that we limit our use of sensitive personal information (such as date of birth or nationality if provided in your resume) to what is necessary to provide the Service.
  • Right to Non-Discrimination: We will not deny you services, charge different prices, or provide a different quality of service because you exercise your privacy rights.

To submit a request, email hr@liftedcv.com with the subject line "CCPA Request." We will verify your identity before processing your request and respond within 45 days.

Notice of Financial Incentive: We do not offer financial incentives for the collection, sale, or deletion of personal information.

10. Do-Not-Track and Global Privacy Control

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat it as a valid opt-out of the sale or sharing of personal information under the CCPA. Some browsers also include a Do-Not-Track (DNT) feature. Because there is no universally accepted standard for DNT signals, we do not currently respond to DNT signals separately from GPC.

11. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe that a child has provided us with personal information, please contact us at hr@liftedcv.com.

12. Security Measures

We implement appropriate technical and organizational security measures to protect your personal information, including encryption at rest and in transit (TLS 1.2+), network isolation, access controls, and regular security assessments. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Effective Date" at the top. For material changes, we will also send an email notification to registered users at least 30 days before the changes take effect. Your continued use of the Service after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

14. How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: hr@liftedcv.com
  • Company: KrisCodes2 LLC
  • Subject Line: "Privacy Inquiry"

We aim to respond to all privacy-related inquiries within 30 days.