Security and Trust
Last updated: May 2025
How We Think About Security
Your resume contains some of your most personal professional information. We treat it that way. Our approach is simple: collect only what we need, encrypt it in transit, and give you full control over your data. No service is perfect, and we are transparent about where the limits are.
What We Protect
Your Resume Stays Yours
Everything you upload belongs to you. We do not sell it, share it with recruiters, or use it to build advertising profiles. We encrypt your data when it travels between your browser and our servers.
Your Account
We never store your password in plain text. When you log in, we use secure cookies that JavaScript cannot access. If you sign in with Google or LinkedIn, we receive only your email and name — never your social media passwords.
AI Processing
To generate suggestions, we send your resume and job description to trusted AI providers. We do not allow these providers to use your content for training their models. Each provider operates under its own security standards, which we assess before integrating. You can read more in our Privacy Policy.
Your Controls
Delete Your Data Anytime
You can delete your account and all your data whenever you want from your account settings. We remove it from our live systems immediately. Backup copies may take a short time to clear as part of standard recovery practices, but your data is not accessible after deletion.
Try Without an Account
Guest mode lets you explore MirrorCV without signing up. Your resume and job description are processed on our servers to generate suggestions. Guest sessions are automatically cleared after a period of inactivity, though we may retain minimal metadata for a short time for analytics and fraud prevention.
Protect Your Login
We recommend using a strong, unique password for MirrorCV. If you reuse a password across multiple sites and one of those sites is breached, your MirrorCV account could be at risk too. A password manager is the easiest way to stay safe.
Where the Limits Are
We do our best, but no online service is unbreachable. Security is a partnership: we handle our side, and you handle yours (strong passwords, not sharing your login, keeping your devices secure). If you want to understand the full legal picture, including liability limits, our Terms of Service has the details.
Found Something?
If you notice something that does not look right — a potential vulnerability, suspicious activity, or just a question about how we handle data — we want to hear it. Reach us at [email protected]. We review every report and genuinely appreciate responsible disclosure.