Privacy
Last updated: [date]
Who runs this
CV Creator is run by [name] as a private project. Questions and requests about your data go to [contact address].
What is stored
- Your account: email address, name, and — if you sign in with Google — your Google profile name and picture. If you add a passkey, its public key (never anything that could sign in as you).
- Sessions: when you signed in, the IP address and browser it came from, until the session ends.
- What you write: your CVs and their earlier versions, the job postings you save, your context document, and the photos you upload.
- Connected AI assistants: which ones you allowed to act on your account, and the tokens they use.
- The built-in assistant: your conversations with it, and a record of the tokens each reply used, the credits it cost, and of every top-up you bought (the amount and the Stripe payment it came from).
There is no analytics, no advertising and no tracking.
Where it goes
- Neon — the database and the photo storage, in AWS eu-central-1 (Frankfurt).
- Hostinger — the server the app runs on, [location].
- Resend — sends the sign-in emails, so it sees your email address.
- Google — only if you choose “Continue with Google”.
- Google Fonts — some CV templates (pixel-art and the industry ones: bistro, motorsport, hi-vis, atelier, classroom) load their typefaces from Google. Whoever views a CV in one of them — you, or anyone you show it to — connects to Google, which sees their IP address. The other templates use only fonts already on the device.
- Anthropic — runs the built-in assistant. When you use it, your messages go to Anthropic together with whatever it reads from your account to answer: your context document, job postings and CVs.
- Stripe — takes payment when you top up credits. Card details go to Stripe directly and never reach this app; Stripe sees your email address and the payment.
- AI assistants you connect (Claude, ChatGPT, …) — what they read from your account is handled under their provider's terms, not these.
Who can see it
You. In addition, the operator's own accounts can switch into any account to help with it or fix it, and while switched they can read and change everything in that account. Nobody else can.
How long it is kept
- Each CV and the context document keep their last 50 versions; older ones are deleted as new ones are saved.
- Everything else is kept until you delete it or the account.
- The database keeps a recovery history for [N] days, so deleted data disappears from it completely after that.
Deleting your account
In the app, the bin icon next to your name. It removes the account and everything in it — CVs, versions, postings, context, photos, assistant conversations and your credit balance — at once. Unused credits are not refunded automatically; write to [contact address]. Stripe keeps its own record of past payments, as the law requires. You need to have signed in within the last day.
Your rights
You can ask for a copy of your data, its correction or deletion, and complain to your data protection authority (in Poland, the UODO). Write to [contact address].