Skip to main content
Security & Privacy

Know Where Your Data Goes

Vivid uses your information to operate the service and generate your documents. This page maps the controls, providers, and choices around that flow.

TLS in transit

Encrypted storage

Export and deletion controls

Protection

How We Protect Your Data

End-to-End Encryption

All data is encrypted in transit using TLS and at rest using AES-256 encryption. Your resume data is never stored in plain text.

Secure Infrastructure

The backend runs on Cloudflare infrastructure, with private files stored in R2. Access controls and monitoring protect production services.

Privacy First

We never sell your data. Your resume is processed by our AI pipeline using Anthropic and Google APIs — neither provider trains models on your data. Your information is used solely to generate your resume and is never sold or used for advertising.

Secure Authentication

JWT-based authentication with bcrypt password hashing. Optional two-factor authentication for additional account security.

Privacy Rights Controls

Account controls support access, export, correction, and deletion requests described in the privacy policy.

Data Deletion

Delete your account and all associated data anytime. We permanently remove all your information within 30 days.

How It Works

Your Data Journey

Every piece of data is encrypted and secured at every step of the process.

User Data

Encryption

Secure Processing

Encrypted Storage

You

Control Summary

Security controls at a glance

TLS

In Transit

Encrypted network connections

2FA

Account Access

Optional second authentication factor

0 days

Deletion Window

Published account-deletion timeline

What Data We Collect & Why

  • Resume Content

    Used solely to customize your resume with our AI. Encrypted at rest. Never shared with third parties or used to train public AI models.

  • Account Information

    Email and password for authentication. Passwords are hashed using bcrypt and never stored in plain text.

  • Payment Information

    Processed securely through Stripe. We never store credit card numbers on our servers.

  • Usage Analytics

    Aggregated usage data to improve our service. Activity logs are linked to your account and permanently deleted when you delete your account.

Compliance

Infrastructure and privacy frameworks

Cloudflare Infrastructure

Cloudflare-hosted backend services, private R2 storage, and edge protection

GDPR Rights Support

Access, export, correction, and deletion workflows

CCPA Rights Support

Know, delete, and do-not-sell policy controls

Security Questions or Concerns?

Contact our security team at gabriel@imvivid.com

Contact Security Team

Privacy policy

Deletion controls

Encrypted transport