Privacy Policy
This policy explains what data Meridian CV (meridiancv.com.br) collects, what it is used for, and your rights, in accordance with the Brazilian General Data Protection Law (LGPD — Law 13,709/2018).
1. Controller and contact
Meridian CV is the controller of the personal data processed in the service. For any privacy matter — including exercising your rights — write to contato@meridiancv.com.br.
2. Data we collect
Account: name (when provided) and e-mail, via e-mail/password sign-up or social login.
Content you submit: the résumé file or text, the job description and the evidence answers you type. This content may include your personal data (contact details, work history, education).
Service usage: analysis events (when an analysis ran, a role-derived identifier, token counts and processing cost) for quota control, abuse prevention and billing.
Payment: handled entirely by Stripe. We do not store card numbers; we receive from Stripe only customer identifiers and subscription status.
Cookies: we use essential session cookies only (authentication). No advertising cookies.
3. How we use the data
Running the service: analyzing your CV against the role, generating suggestions, the letter and interview questions, and keeping your analyses available in your account.
Operating the business: enforcing plan quotas, preventing fraud and abuse, billing subscriptions and providing support.
Legal bases (LGPD art. 7): contract performance, legal obligation and legitimate interest (security and abuse prevention).
4. Artificial intelligence and no-training
The analysis is processed through the Claude API (Anthropic). Your CV and job-description content is sent to Anthropic exclusively to produce your analysis and is not used to train AI models.
Results are AI-generated and may contain errors; review before using.
5. Who we share data with
Processors that run the service: Anthropic (AI processing), Supabase (database and authentication), Stripe (payments) and Amazon Web Services/Amplify (hosting). Each processes data under contract and only for the contracted purpose.
We do not sell personal data and we do not share your résumé with employers or third parties for marketing.
6. Storage and retention
Your analyses stay linked to your account until you delete them in the app or close the account. Usage events and billing records are kept for as long as needed for quota control and tax/accounting obligations.
When you delete your account, the data linked to it is removed, except for records the law requires us to keep.
7. International transfers
Some processors handle data outside Brazil (United States and other regions), with adequate contractual safeguards as provided by the LGPD (arts. 33 et seq.).
8. Security
All traffic uses TLS. Database access is segregated per user (row-level security), API keys are restricted to the server, and administrative access is limited. No system is infallible; relevant incidents will be communicated as required by the LGPD.
9. Your rights (LGPD)
You may request: confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, and withdrawal of consent (art. 18).
To exercise them, write to contato@meridiancv.com.br. We respond within the LGPD's timeframes. You may also petition the ANPD (Brazilian data-protection authority).
10. Changes to this policy
We may update this policy to reflect changes in the service or in the law. The date at the top indicates the current version; relevant changes will be announced on the site or by e-mail.