Privacy Policy

Last updated: 1 May 2026

This Privacy Policy explains how CV Pro collects, uses, stores, and protects your personal data. We are committed to GDPR compliance as we operate primarily in the EU.

1. Who we are

CV Pro is the data controller for personal data you provide when using the Service. For data-related questions, contact us via the help center.

2. What data we collect

We collect the following categories of data:

  • Account data — your email address, name (optional), and account preferences
  • CV and profile data — the content of CVs you upload or create, LinkedIn URLs you provide, and any other career information you submit
  • Usage data — which features you use, when, and how often (anonymized event logs)
  • Payment data — handled entirely by Stripe; we receive only a payment status and subscription tier, never card details
  • Interview session data — your text responses during interview practice sessions

3. How we use your data

  • To provide the Service: generate CVs, score fitness, run interviews, and produce reports
  • To manage your account and subscription
  • To send transactional emails (confirmation, billing receipts, quota alerts)
  • To improve the reliability and quality of the Service through aggregated, anonymized usage analysis

We do not use your CV content or interview data to train AI models. We do not sell, rent, or share your personal data with recruiters, employers, or data brokers.

4. Data storage and security

All data is stored in an EU-region database (Supabase, Frankfurt). Data is encrypted at rest and in transit (TLS). Access is restricted to authorized personnel only.

5. Data retention

Your data is retained for as long as your account is active. You can delete individual CVs, sessions, or your entire account at any time from Settings → Account. Full account deletion is permanent and completed within 30 days.

6. Your rights (GDPR)

If you are based in the EU or UK, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Portability — receive your data in a structured, machine-readable format
  • Restriction — request that we limit processing of your data
  • Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us via the help center. We will respond within 30 days.

7. Cookies

CV Pro uses strictly necessary cookies for authentication (session tokens). We do not use advertising cookies or third-party tracking. Analytics, if enabled, use anonymized, cookieless measurement.

8. Third-party services

We use the following sub-processors:

  • Supabase — database and authentication (EU region)
  • Vercel — application hosting
  • Stripe — payment processing
  • Anthropic — AI model provider (CV content sent for processing; not retained for training)

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered users at least 14 days before taking effect.