Privacy Policy

1. Data Controller

The controller of your personal data within the meaning of the GDPR (General Data Protection Regulation) is:

• contact@cvprofiler.online

2. What Data We Collect and For What Purposes

We only collect data that is necessary to provide you with the services of creating, improving, securing, and billing for your CV.

• Account Management: During account creation, we collect your email, username, and basic data from external login providers (e.g., Google). This data is processed to create and maintain your account.
• Your Documents: If you use the CV builder, we store the information you enter: name, address, phone number, employment history, education, skills, and any other info provided in the editor. This data is used to generate, store, and display your CV and export it to PDF.
• AI Analysis: Using our AI-powered features, fragments or the entirety of your CV may be processed to advise you on better job descriptions, adapt to ATS filters, and extract keywords.
• Billing Information: If you upgrade to Pro, Stripe processes your payment details and may collect billing name, billing address, country, postal code, and transaction metadata. We store subscription details needed to manage your plan, such as plan tier, billing interval, status, renewal or cancellation dates, and Stripe customer or subscription identifiers. We do not store full payment card numbers.
• Analytics: We collect anonymous or pseudonymous behavioral info in our web app (visited pages, device info, etc.) to improve our services and diagnose errors.

3. Third-Party Processors

We do not sell your personal data. Your data is only shared with trusted service providers whose infrastructure we use:

• Clerk: Used for identity security, storing authorization credentials, and managing user sessions.
• Neon / Vercel Postgres: Used for secure, encrypted storage of your CV structure.
• OpenAI: AI services API. Document content is sent solely as prompts to the model for evaluation and translation or generation. According to OpenAI's policy, they do not use data submitted via API to train their models.
• Stripe: Used to process subscription payments, manage recurring billing, apply promotion codes, store invoices and transaction metadata, and provide the customer billing portal.
• PostHog: Product analytics platform helping us understand user behavior and collect anonymous logs.

Note: Unlike mass career platforms, we do not share your CV data with external employers or recruiter databases. Only you have access to your document.

4. Legal Bases for Processing

Depending on how you use the service, we process your data under one or more of the following legal bases:

• Contract Performance: To create and maintain your account, provide the CV builder and AI tools, export documents, and manage your subscription.
• Legitimate Interests: To secure the service, prevent abuse and fraud, diagnose bugs, improve product performance, and support billing operations.
• Consent: Where required, for optional analytics, cookies, or similar technologies that are not strictly necessary to provide the service.
• Legal Obligation: To retain records required by tax, accounting, consumer-protection, anti-fraud, or other applicable laws.

5. Your Rights (GDPR Compliance)

Under the GDPR, you have the right to:

• Access and Rectification: You can modify every entry in your CV through the editor or dashboard.
• Right to delete the data: You can delete individual documents or request deletion of your account data. Some data, including certain billing, tax, accounting, fraud-prevention, or security records, may need to be retained for as long as required by law or legitimate business needs.
• Data Export: You can export your PDF CV at any time. Contact us if you need a machine-readable export of your account data or information related to your subscription records.
• Right to Object: If you wish to object to the processing of your data, please contact us by e-mail. You also have the right to lodge a complaint with a supervisory authority.

6. Children's Privacy

Our service is meant to support the career development of adults. We do not knowingly collect data from persons under 16 years of age. If we detect an account belonging to someone under this age, we will delete it immediately.

7. Data Retention

Your personal data is generally kept until you decide to delete it or close your account. We may retain limited residual logs for security, abuse prevention, and troubleshooting for a short period after termination. Billing, invoice, tax, accounting, dispute, and fraud-prevention records may be retained for longer where required by law or reasonably necessary to establish, exercise, or defend legal claims.

8. Contact

If you have any questions related to privacy settings or this document, please contact us at: contact@cvprofiler.online.