This Privacy Policy describes how agent-cv ("we", "us") handles information when you use agent-cv.dev, sign in, or publish a developer profile. The agent-cv CLI runs primarily on your machine; a short note on optional CLI telemetry is included below. Use of the Service is also subject to our Terms of Service.
1. Who we are
The Service is operated by agent-cv. Contact: [email protected].
2. Information we collect (website)
Account and session. When you sign in with GitHub, we use OAuth with scope read:user to read basic GitHub profile data needed to identify you (for example GitHub user id, username, and avatar URL). We issue an HTTP-only, secure session cookie (agent-cv-session) containing a signed token (JWT) that includes your GitHub user id and username. The cookie is used to keep you signed in and to authorize edits and sync for your profile. Session lifetime is up to approximately 30 days unless you sign out or clear cookies.
Published profile content. When you publish or sync from the CLI, we store the portfolio data you choose to upload (for example project summaries, bio, social links, and related metadata) so it can be shown on your public profile pages. Public profiles are visible to anyone with the URL unless you remove or change that content through the product.
Public surfaces. The same published data may appear on multiple endpoints we operate (HTML profile, Open Graph previews, feeds, exports, or machine-readable profile files for tools). Treat everything you sync as public by default unless the product offers a way to restrict or remove it.
Analytics (optional). When configured, we use PostHog on agent-cv.dev to understand how the site is used (for example page views, page leave, product analytics, and optional autocapture). PostHog may set first-party cookies or use similar storage. Data is processed according to PostHog's policies. If analytics are not configured for a deployment, this category does not apply.
UTM and referrals. We may record campaign parameters (for example UTM tags) as analytics events when present, to measure traffic sources.
3. CLI and local data
The agent-cv command-line tool runs on your computer. Project paths, git metadata, and generated content stay local unless you explicitly publish or sync to agent-cv.dev. If you connect third-party AI tools (for example Claude, Codex, Cursor, or OpenAI-compatible APIs) from the CLI, those vendors process prompts and outputs under their own terms and privacy policies; this Policy does not describe their processing.
The CLI may offer optional anonymous telemetry (for example usage events sent to PostHog) to improve the product; you can turn this off in agent-cv config or by setting AGENT_CV_TELEMETRY=off. Telemetry, when enabled, is described in the CLI interface and documentation.
4. How we use information
We use the information above to:
- Provide, secure, and improve the Service (including authentication and sync).
- Display your public profile and related pages (for example OG images, feeds, or exports where enabled).
- Measure product usage and diagnose issues when analytics are enabled.
- Comply with law and respond to valid legal requests where required.
5. Sharing and processors
We use infrastructure and service providers to host the Service (for example hosting and database providers). When analytics are enabled, PostHog processes analytics data as described in their privacy materials. GitHub processes OAuth and profile data under GitHub's privacy statement. We do not sell your personal information.
6. Retention
Session cookies expire as described above. Published profile data is kept until you remove it with agent-cv unpublish, replace it by publishing again, or until we remove it where necessary to operate or comply with law. Analytics events are retained according to our analytics provider's settings and our configuration.
7. Your choices and rights
You can sign out by clearing the session cookie (and avoid signing in again). You can control what appears on your public profile through the editor. Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. To exercise these rights or ask questions, contact [email protected]. We will respond within a reasonable time.
To remove your hosted public profile and synced portfolio data from agent-cv.dev, run agent-cv unpublish in the agent-cv CLI while authenticated with the same GitHub account you use to publish. That unpublishes your portfolio on our servers; it is the standard way to take your profile offline.
To request broader deletion of your hosted account or help when you cannot use the CLI (for example you no longer have access to the machine where credentials were stored), email [email protected] from an address we can associate with your account or include your GitHub username. We will verify and complete deletion within a reasonable period, subject to law and minimal records we may be required to retain.
8. International transfers
We and our processors may process data in the United States and other countries where we or they operate. Those countries may have different data protection laws than your country of residence.
9. Children
The Service is not directed at children under 16, and we do not knowingly collect personal information from them.
10. Changes
We may update this Privacy Policy from time to time. The "Last updated" date above will change when we do. Material changes may be announced on this page or through the Service where appropriate.