Quick Summary
What We Collect
Email, name, CV content, usage data
How We Use It
Provide CV tailoring service, improve platform
Who We Share With
OpenAI (AI), Stripe (payments), Supabase (storage)
Your Rights
Access, delete, export, correct your data anytime
1. Introduction
Welcome to CV Adapter. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our CV tailoring service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, password (encrypted), name
- CV Content: Your uploaded CV files and the text content within them
- Job Information: Job titles, company names, job descriptions you input
- Generated Content: AI-generated CVs and cover letters
- Payment Information: Processed securely through Stripe (we don't store card details)
2.2 Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on platform
- Device Information: Browser type, operating system, IP address
- Cookies: Session cookies for authentication and preferences
3. How We Use Your Information
We use your information to:
- Provide our CV tailoring service
- Generate AI-powered CVs and cover letters
- Maintain and improve our platform
- Process payments and subscriptions
- Communicate service updates
- Analyze usage to improve user experience
We do NOT:
- ❌ Sell your personal data to third parties
- ❌ Share your CV content with anyone except OpenAI for processing
- ❌ Use your data for marketing without consent
- ❌ Train AI models on your data
4. Data Storage and Security
4.1 Security Measures
- ✅ Encryption: All data encrypted in transit (HTTPS) and at rest
- ✅ Authentication: Secure password hashing
- ✅ Access Control: Row Level Security on all database tables
- ✅ API Security: Server-side API key management
4.2 Data Retention
- Active Accounts: Data retained while account is active
- Inactive Accounts: Data deleted after 5 years of inactivity
- Deleted Accounts: Data permanently deleted within 30 days
- Backups: Backup data retained for 90 days then deleted
5. Third-Party Services
OpenAI (AI Processing)
Purpose: Generate tailored CVs and cover letters
Data Sent: CV content, job descriptions
Privacy: OpenAI Privacy Policy
Stripe (Payment Processing)
Purpose: Process subscription payments
Security: PCI DSS compliant
Privacy: Stripe Privacy Policy
6. Your Rights (GDPR Compliance)
- ✅ Right to Access: Request a copy of your data
- ✅ Right to Rectification: Correct inaccurate data
- ✅ Right to Erasure: Delete your account and data
- ✅ Right to Portability: Export your data
- ✅ Right to Object: Object to data processing
To exercise your rights, contact us at: privacy@cvadapter.com
7. Cookies
We use essential cookies for:
- Authentication (keeping you logged in)
- Session management
- Security (CSRF protection)
We do NOT use cookies for advertising or cross-site tracking.
8. Children's Privacy
CV Adapter is NOT intended for users under 16 years old. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be notified via email.
10. Contact Us
Data Protection Officer
Email: privacy@cvadapter.com
Response Time: Within 5 business days
You have the right to lodge a complaint with a supervisory authority (e.g., ICO in the UK).
Last Updated: September 30, 2025
Version: 1.0