Privacy Policy

The short version

ThunderCV has no accounts and never stores your resume. Everything you type, upload or generate stays inside your own browser. We cannot read your resume, because it is never sent to us.

Three things are sent to our server: a review, if you choose to write one; an anonymous count when you visit; and — only if you buy a premium download — the details of that purchase, so we can give you your file, honour the free re-download and answer a refund query. All three are described in full in sections 3 and 5.

Buying something is the one moment ThunderCV learns who you are. Even then it is your name, email, mobile and job title — never your resume, which stays in your browser exactly as before.

1. What we do not collect

• Your resume content. Names, contact details, work history, education, skills and any other field you fill in are held in your browser's memory only. This is true even though we do store reviews — the two are completely separate.
• Files you upload. PDF and DOCX files you import are parsed locally, in the browser tab. The file is never uploaded to a server.
• Job descriptions. Text pasted into the JD matcher is compared on your device and discarded when you close the tab.
• Accounts. There is no sign-up, so we hold no passwords and no user profiles. We hold an email address only if you have bought a premium download, and only as part of that purchase record — see section 5.

Your resume is kept in this browser's session storage while you work, so a reload or an accidental refresh will not lose it. It stays on your device and is never sent to us. Closing the tab clears it permanently — there is no copy anywhere else, so download your file before you leave. On a shared or public computer that is a feature: the next person cannot see what you were working on.

2. Cookie consent

No cookies are set, and no advertising identifiers are sent, until you press Accept. Until then Google’s tags run in a consent-denied mode: they report an anonymous, cookieless page hit so we can tell how many people reached the site, and nothing is written to your device and nothing can be tied back to you.

Pressing Accept allows analytics and advertising cookies. Pressing Decline, or ignoring the banner entirely, keeps the cookieless mode in place for as long as you use the site. Either way the resume builder, ATS checker, JD matcher and cover letter builder behave identically, because none of them needs a cookie. You can change your mind at any time by clearing this site’s data in your browser.

3. What we do store on our servers

Reviews

If you submit a review, the star rating, the text and the name you enter are stored in our database (Amazon DynamoDB, Mumbai region) and displayed publicly on this site. Leave the name blank and it is published as "Anonymous". Please do not put personal details in a review — it is a public page. To have a review removed, use our contact page with enough detail to identify it and we will delete it.

Visitor counts

We count visits so we can see whether the site is being used. A one-way hash of your IP address is stored to avoid counting the same visitor twice on a given day. The hash cannot be reversed to recover your IP, it is not linked to anything you do on the site, and it is never linked to a resume.

Download records

When a resume is downloaded we store one row recording that it happened: the time, which template was used, the file format, the page count, whether the download was free or paid for, and the same coarse browser and device summary described below. We keep this because it is the only way to tell a day of free downloads apart from a broken paywall.

Nothing from the resume is included. Not your name, not your email address, not your phone number, not a single field you typed — the row is about the download, not about you, and it is not linked to your identity. If the download was a paid one it references the purchase record below, which you already gave us your details for; a free download references nothing.

Purchase records

If you buy a premium download we store a record of that purchase, including your name, email, mobile number and job title. This is the only personal data ThunderCV holds about you, and section 5 sets out exactly what it contains, why, and for how long.

All of the above is held in our own AWS account in the Mumbai (ap-south-1) region and is not sold, shared or used for advertising.

4. What else is collected

Analytics

We use privacy-respecting analytics to count page views and understand which templates and tools get used. This records the page visited, approximate region (country/state level), device type and referring site. It does not record the contents of your resume, and it is not used to identify you personally.

Advertising

Some pages may display ads served by third-party ad networks, including Google AdSense. These networks may set cookies or use device identifiers to show relevant ads and measure performance. They do not receive your resume content. You can opt out of personalised advertising through Google Ad Settings or optout.aboutads.info.

Server logs

Our hosting provider keeps standard access logs (IP address, timestamp, requested URL, user agent) for security and abuse prevention. These are retained for a limited period and are not linked to resume content.

5. Payments

Premium downloads are a one-time payment handled by Razorpay, an RBI-authorised payment aggregator. Card numbers, UPI PINs, CVVs and bank credentials are entered on Razorpay's own systems and never touch ThunderCV. We could not store your card details if we wanted to — we never receive them.

We do keep a record of the purchase itself. This is the only part of ThunderCV that stores personal data about you, so it is worth setting out in full.

What we store when you pay

• Your name and job title, taken from the resume you were downloading, so we can identify the purchase if you contact us.
• Your email address and mobile number, as given to Razorpay at checkout. The email doubles as your promo code for the free re-download.
• Payment details — a Razorpay payment reference, the amount, the method used (UPI, card, netbanking or wallet), and whether it succeeded. Not the card or account it came from.
• Download record — when you downloaded, how many times, and whether the free re-download has been used.
• Technical context — your IP address, and a random identifier this site generates for your browser (see below).

Why we store it

• To give you what you paid for — including recognising you on a return visit so you are never asked to pay twice for the same resume.
• To answer refund and support queries. Without a record, a payment on your bank statement could not be matched to anything here.
• To prevent fraud. We check for patterns like one browser opening many orders in a few minutes, or paying under a series of different email addresses — the shapes that promo abuse and stolen-card testing take.
• To understand our own product — which templates and payment methods people actually use. This is counting, not profiling.
• Because we have to. Transaction records are needed for tax and accounting.

The browser identifier

When you pay we store a random identifier in your browser. It is worth being precise about what it is not: it is not a fingerprint. It is a random number we generate, not anything measured about your device, so it cannot be recreated once you clear it and it means nothing to any other website. It exists so we can spot a single browser paying under many different email addresses — which email alone cannot reveal — and to tell a returning customer from a new one. Clearing your browser data removes it, and nothing you have paid for is lost if you do.

Who sees it

Nobody outside ThunderCV and Razorpay. This data is held in our own AWS account in the Mumbai (ap-south-1) region. It is never sold, never shared with advertisers, and never used to target ads. Razorpay processes your payment as an independent controller under its own privacy policy.

How long we keep it

The free re-download expires after 3 days and the record stops being operationally useful soon after. We keep purchase records for 8 years, because Indian tax law requires transaction records to be retained. Beyond what tax law requires, we hold nothing else about you — and we never link a payment record to a resume, because we do not have your resume.

You can ask us to delete a purchase record using our contact page. Where tax law obliges us to keep the transaction, we will tell you plainly rather than quietly refuse, and we will delete everything not covered by that obligation.

6. Cookies

ThunderCV itself does not require cookies to function. Cookies present on the site come from analytics and, where shown, advertising partners. You can block or delete cookies in your browser settings; the resume builder will continue to work normally.

7. Children

ThunderCV is intended for job seekers and is not directed at children under 13. We do not knowingly collect information from children.

8. Your rights

We hold no resume and no account for you, so for most visitors there is nothing to export or delete. There are three exceptions: a review you submitted, which we will remove on request; the hashed visit record, which cannot be traced back to you; and — if you have paid for a download — your purchase record.

For a purchase record you can ask us for a copy of it, for corrections, or for deletion. We will delete everything except what Indian tax law requires us to retain (section 5), and we will tell you specifically what was kept and why rather than refusing in general terms. Quote your payment reference, or the date and amount, so we can find it.

For analytics or advertising data held by our partners, use the opt-out links above. Write to our contact page and we will respond within 30 days.

9. If you are in the United States

ThunderCV is operated from India and is available worldwide, including to visitors in the United States.

We do not sell your personal information, and we never have. Under the California Consumer Privacy Act as amended by the CPRA, allowing an advertising partner to read cookies for cross-context behavioural advertising can count as “sharing” even when no money changes hands. That only happens on ThunderCV if you press Accept on the cookie banner. Press Decline, or simply ignore it, and no advertising identifiers are transmitted — see section 2.

California residents may request access to, correction of, or deletion of personal information we hold, and may opt out of sharing at any time, without being treated differently for doing so. In practice we hold almost nothing: your resume is never uploaded, and there is no account. To opt out after accepting, clear cookies for this site or press Decline when the banner next appears. To exercise any other right, or to appoint an authorised agent, write to us via our contact page. We respond within 45 days.

10. If you are in India

For visitors in India, we process personal data under the Digital Personal Data Protection Act, 2023. There are two different bases, and it is worth separating them:

• Analytics and advertising — your consent, given through the cookie banner. Withdraw it at any time by pressing Decline or clearing this site’s cookies.
• Purchase records (section 5) — the data you voluntarily provided in order to complete a purchase you asked us for, together with our legal obligation to retain transaction records for tax. This is not covered by the cookie banner, and declining cookies does not prevent it: without it we could not deliver your download or process a refund.

You may ask us to correct or erase a review you submitted, or your purchase record. Withdrawing consent cannot undo a tax-retention obligation, and we will say so specifically rather than refusing in general terms. Requests and grievances go to our contact page; we respond within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

11. Third-party links

The site links to external resources such as job boards and reference material. Those sites have their own privacy policies, and this policy does not cover them.

12. Changes to this policy

If this policy changes materially, the date at the top of this page will be updated. Continued use of ThunderCV after a change means you accept the revised policy.

13. Contact

For any privacy question, use our contact page.