Is my resume data secure?
Resumes hold personal data. Crocodile CV keeps that PII in a locked-down workspace you control.
Resume content is stored in Cloud SQL on Google Cloud with encryption at rest and encrypted API connections. Your resumes are never mixed into another user's queries—every lookup is filtered by organization.
Authentication is passwordless magic link with HttpOnly cookies. Logging out revokes sessions, including the product-origin cookie used for premium PDF and audio export.
AI rewrite and audio features call providers from the server only. In Settings, download a JSON export of your data or delete your account to erase resumes and branding while retaining email and billing history we must keep for compliance.
Daily automated backups support recovery.
When you use optional features, content may briefly leave GCP. This post is our published subprocessor list:
- Google Cloud Platform — https://cloud.google.com/
- Stripe — https://stripe.com/
- Brevo — https://www.brevo.com/
- Mailgun — https://www.mailgun.com/
- pdf.co — https://pdf.co/
- Google Gemini — https://ai.google.dev/
- Perplexity — https://www.perplexity.ai/
- ElevenLabs — https://elevenlabs.io/
- Resume PII encrypted at rest and isolated per workspace
- Magic-link auth and revocable HttpOnly sessions
- Premium AI and PDF stay server-side
- Export or erase business data from Settings