LuminousCV is operated by Third River Solutions. We provide an AI-powered CV optimisation service accessible at luminouscv.com. When this policy refers to “we”, “us”, or “our”, it means Third River Solutions.

Questions about this policy can be sent to privacy@thirdriver.dev.

We collect only what is necessary to provide the service:

• Account data — your name, email address, and (if you use Google sign-in) your Google profile identifier.
• CV files — documents you upload for optimisation. These are stored temporarily in encrypted cloud storage and deleted after 90 days of inactivity.
• Job descriptions — the role briefs you paste into the upload form, used solely to generate your tailored CV.
• Billing data — your subscription status and payment reference IDs managed through Paystack. We do not store raw card numbers.
• Usage data — anonymised product analytics (page views, feature interactions) used to improve the service.

We use your data to:

• Create and maintain your account
• Generate and store your optimised CV results
• Process payments and manage your subscription
• Send transactional emails (password resets, receipts)
• Improve the service through aggregated, anonymised analytics

We do not sell your personal data or use it to train AI models.

We use the following third-party processors:

• OpenAI — processes your CV and job description to generate optimisation suggestions. Data is not used to train OpenAI models under our API agreement.
• Prisma / PostgreSQL — structured data storage.
• Backblaze B2 — encrypted file storage for CV documents.
• Paystack— payment processing. Governed by Paystack's own privacy policy.
• Vercel — hosting and serverless infrastructure.
• Sentry — error monitoring. Stack traces may contain request metadata but are not linked to personal profiles.

We retain your account data for as long as your account is active. Uploaded CV files and job descriptions are deleted 90 days after your last login or on account deletion, whichever comes first.

You can request deletion of your account and associated data at any time.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Object to or restrict certain processing
• Export your data in a portable format

To exercise any of these rights, email us at privacy@thirdriver.dev. We will respond within 30 days.

We use a single session cookie required for authentication. We do not use tracking or advertising cookies.

All data is transmitted over HTTPS. CV files are stored with server-side encryption. Passwords are hashed using bcrypt and never stored in plaintext.

We may update this policy from time to time. Significant changes will be notified via email or an in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.

LuminousCV is operated by Third River Solutions. We provide an AI-powered CV optimisation service accessible at luminouscv.com. When this policy refers to “we”, “us”, or “our”, it means Third River Solutions.

Questions about this policy can be sent to privacy@thirdriver.dev.

We collect only what is necessary to provide the service:

• Account data — your name, email address, and (if you use Google sign-in) your Google profile identifier.
• CV files — documents you upload for optimisation. These are stored temporarily in encrypted cloud storage and deleted after 90 days of inactivity.
• Job descriptions — the role briefs you paste into the upload form, used solely to generate your tailored CV.
• Billing data — your subscription status and payment reference IDs managed through Paystack. We do not store raw card numbers.
• Usage data — anonymised product analytics (page views, feature interactions) used to improve the service.

We use your data to:

• Create and maintain your account
• Generate and store your optimised CV results
• Process payments and manage your subscription
• Send transactional emails (password resets, receipts)
• Improve the service through aggregated, anonymised analytics

We do not sell your personal data or use it to train AI models.

We use the following third-party processors:

• OpenAI — processes your CV and job description to generate optimisation suggestions. Data is not used to train OpenAI models under our API agreement.
• Prisma / PostgreSQL — structured data storage.
• Backblaze B2 — encrypted file storage for CV documents.
• Paystack— payment processing. Governed by Paystack's own privacy policy.
• Vercel — hosting and serverless infrastructure.
• Sentry — error monitoring. Stack traces may contain request metadata but are not linked to personal profiles.

We retain your account data for as long as your account is active. Uploaded CV files and job descriptions are deleted 90 days after your last login or on account deletion, whichever comes first.

You can request deletion of your account and associated data at any time.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Object to or restrict certain processing
• Export your data in a portable format

To exercise any of these rights, email us at privacy@thirdriver.dev. We will respond within 30 days.

We use a single session cookie required for authentication. We do not use tracking or advertising cookies.

All data is transmitted over HTTPS. CV files are stored with server-side encryption. Passwords are hashed using bcrypt and never stored in plaintext.

We may update this policy from time to time. Significant changes will be notified via email or an in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.