Privacy Policy

When you create an account we collect your email address and a securely hashed version of your password. We never store your password in plain text.

Resume content you enter (name, work history, education, skills, etc.) is stored in our database so you can access it across devices. This data belongs to you.

We collect basic usage data — which features you use, error logs — to operate and improve the service. We do not sell this data.

If you upload a profile photo, it is stored in our file storage and is publicly readable by anyone who has its link. It is deleted when you delete your account.

If you sign in with Google, we receive your email address from Google to create your account. We do not receive your Google password.

If you pay for a subscription, Stripe processes your payment. We store only your Stripe customer ID and subscription status. We never see or store your full card number.

If you use the contact form, we store the name, email address, subject and message you send, so we can reply. To limit spam we also keep a one-way scrambled code made from your IP address (not the IP address itself).

When bot protection is turned on, the sign-up, sign-in and password-reset pages show an hCaptcha check, which collects your IP address and browser information to tell people from bots. It is not loaded on any other page.

• To provide and operate the Strevit service
• To send transactional emails (account verification, password resets, billing receipts)
• To improve the product based on aggregate usage patterns
• To comply with legal obligations

We do not use your resume content to train AI models or share it with third parties for marketing purposes.

When you use AI features (resume generation, bullet improvement, cover letter), your text is sent to Anthropic for processing. Anthropic processes this data according to their own privacy policy. We send only the content necessary to complete the requested action — we do not include your email or payment information in AI requests.

We share data only with the following service providers, strictly to operate the service:

• Supabase — Database, authentication, and backend infrastructure. Your account data, resume content, and profile information are stored on Supabase's servers.
• Anthropic — AI text processing
• Stripe — Payment processing
• Hostinger — Website hosting and email delivery
• Google — Sign-in with Google (if you choose it) and Google Analytics (only if you accept analytics)
• hCaptcha (Intuition Machines, Inc.) — Bot protection on the sign-up, sign-in and password-reset pages, when turned on

Resumes you choose to share. If you create a share link for a resume, that page becomes readable by anyone with the link, without signing in — including the name, email, and phone number on it. You can revoke it at any time with "Stop sharing" in the builder, which takes effect immediately.

We do not sell, rent, or trade your personal information to any third party.

Your account and resume data are retained for as long as your account is active.

You can delete everything yourself at any time from Settings → Danger Zone. That removes your account, all resumes, your uploaded profile photo, and cancels any active subscription immediately. It cannot be undone.

If you would rather we did it, email contact@strevit.com and we will delete all associated data within 30 days.

Contact-form messages are kept so we can reply and deal with any follow-up. You can ask us to delete yours at any time.

Payment and invoice records are held by Stripe for as long as tax and accounting law requires, even after your account is deleted.

Passwords are hashed with bcrypt before storage. All data is transmitted over HTTPS. We apply industry-standard access controls to our database. No system is 100% secure — if you discover a security issue, please contact us immediately.

Essential. We store a login token in your browser's localStorage to keep you signed in, and your cookie choice so we don't ask again. These are required for the site to work and cannot be turned off.

Analytics (optional). If you accept, we load Google Analytics, which sets _ga cookies to measure page visits and which features get used. If you choose "Essential only", Google Analytics is never loaded and no request is made to Google. You can change your mind by clearing this site's data in your browser, which brings the banner back.

We do not use advertising cookies, and we do not sell or share analytics data for marketing.

If you are in the UK or European Economic Area, the UK GDPR and EU GDPR give you specific rights over your data. We extend the same rights to everyone, wherever you live.

Your rights:

• Access — ask for a copy of the personal data we hold about you
• Rectification — correct anything inaccurate (most of it you can edit directly in the app)
• Erasure — delete your data, either yourself in Settings or by asking us
• Portability — receive your resume data in a machine-readable format
• Restriction and objection — ask us to limit or stop certain processing
• Withdraw consent — for analytics, at any time, with no effect on the service

Why we are allowed to process your data (legal basis):

• Contract — your account, your resumes, and the AI features you ask us to run. We cannot provide the service without these.
• Consent — Google Analytics only. Declining changes nothing else.
• Legitimate interests — security, abuse prevention, and error logs, balanced against your privacy.
• Legal obligation — retaining billing records where tax law requires it.

International transfers. Strevit is operated from Thailand, and our providers (Supabase, Anthropic, Stripe, Google, Hostinger) process data on servers that may be outside your country, including in the United States. Where required, those providers rely on Standard Contractual Clauses or an equivalent safeguard.

To exercise any of these rights, email contact@strevit.com. We will respond within 30 days and will not charge you. If you believe we have handled your data improperly, you may complain to your local data protection authority.

Strevit is operated from Thailand, so Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") applies to how we handle your data, wherever you live. For the PDPA, we are the data controller. You can reach us at contact@strevit.com. We have not appointed a data protection officer.

What we collect, why, the legal basis, who receives it, and how long we keep it are set out in sections 1–8 above.

Your rights under the PDPA:

• Withdraw consent at any time, for processing based on consent (analytics). Withdrawing does not affect processing that happened before it.
• Access your personal data and get a copy, and ask us to tell you how we got any data you did not give us yourself.
• Data portability: receive your data in a commonly used, machine-readable format, or ask us to send it to another controller where that is technically possible.
• Object to processing.
• Erasure: ask us to delete, destroy or anonymise your data.
• Restriction: ask us to suspend use of your data.
• Rectification: ask us to correct your data and keep it accurate, up to date and complete.
• Complain to the Office of the Personal Data Protection Committee (PDPC), Thailand, at www.pdpc.or.th.

To use any of these rights, email contact@strevit.com. We will act on your request within 30 days. We may refuse a request only where the law allows it, and if we do we will tell you why.

Data you must give us. An email address and password (or a Google sign-in) are needed to create an account. Without them we cannot provide an account. Everything else, including your resume content, is up to you.

Transfers outside Thailand. As described in section 8, our providers may process data outside Thailand, including in the United States. We use providers that offer safeguards for such transfers.

Under 20. Under Thai law, people under 20 are minors. You must be 16 or older to use Strevit. If you are under 20, please ask a parent or guardian before accepting optional analytics cookies.

We may update this policy. The date at the top shows when it last changed. If a change is material, we will tell you by email or with a notice in the app before it takes effect.

Questions? Email us at contact@strevit.com.