What we collect
- The resume file you upload and the text we extract from it.
- The job posting text you paste, and a URL if you provide one.
- Your email address, used to deliver your files and to enforce the one-scan-per-7-days limit on the free scan.
- Answers you give in the metric interview.
- Payment confirmation from Stripe. We never see or store your card number.
- Basic technical logs (time of request, approximate region, browser type) kept for security and to keep delivery under five minutes.
- Anonymous usage analytics through Google Analytics: which pages are visited and which version of the home page headline you saw. Analytics never receives your resume, your posting or your email address.
How we use it
We use your information to do the thing you asked for: score your resume against a posting, produce your verdict, pay report and red flag check, rewrite your resume and cover letter, and deliver them to you. We also use it to answer support requests and to honour the guarantee.
We do not use your resume to train models, we do not build marketing profiles, and we do not send newsletters unless you ask for one.
AI processing
Your Candidate Profile and the posting are processed by a large language model run by a third-party AI provider under commercial terms that do not permit training on customer data. Salary lookups go to a market-data provider and include only a job title and a city, never your name or resume.
How long we keep it
- Free scan: the resume file and posting are deleted within 24 hours of scoring. We keep the email address and score date for 7 days to enforce the scan limit.
- Single Shot: files and generated documents are kept for 30 days so we can honour the free revision and the guarantee, then deleted.
- 30-Day Pass and Landed: kept for the access period plus 30 days, then deleted.
- You can delete everything sooner, at any time, with one click from your delivery email or by writing to us.
Your rights
Wherever you live, you can ask what personal information we hold about you, ask us to correct it, withdraw your consent, and ask us to delete it. Email us and we will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada or your local data-protection authority.
Security
Data is encrypted in transit and at rest. Access is limited to what is needed to deliver and support the service. No system is perfectly secure; if a breach ever affects your information, we will tell you.
Age
Orvenic is for people who are legally able to work in the country where they are applying. It is not directed at anyone under 16.
Changes and contact
We will post any changes to this policy here with a new date. Questions and requests go to hello@orvenic.com.