Privacy Policy

Last updated: May 2026

1. Who we are

CVCreater ("we", "our", "us") is a CV creation service operated from Helsinki, Finland. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR).

2. What data we collect

  • Email address — required to deliver your CV access link and service emails.
  • CV content — name, work history, skills, education, and other details you enter in the wizard.
  • Payment data — processed entirely by Stripe. We never see or store your card number.
  • Usage data — anonymised page views and country (no cookies, no fingerprinting).

3. How we use your data

  • To generate and deliver your CV PDF.
  • To send your magic-link access email.
  • To allow you to edit your CV for 30 days after purchase.
  • To improve service quality using aggregated, anonymous analytics.

4. Data retention & deletion

Your CV data and email address are automatically deleted 60 days after your CV is created. No manual request needed. Payment records are retained for 7 years as required by EU accounting law (stored by Stripe).

5. Third-party services

  • Supabase — database hosted in EU (eu-north-1, Stockholm).
  • Stripe — payment processing. Subject to Stripe's own privacy policy.
  • Google Gemini — AI translation and cover letter generation. Only CV content relevant to the requested task is sent.
  • Vercel — hosting and edge functions.
  • Jooble — job listing search (keywords and location only; no personal data sent).

6. Your rights (GDPR)

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (it is deleted automatically at day 60 in any case).
  • Object to or restrict processing.
  • Lodge a complaint with your national data protection authority.

To exercise any right, email us at privacy@cvcreater.com.

7. Cookies

We do not use tracking cookies or advertising cookies. Language preference is stored in your browser's localStorage only. Vercel may set a performance-related cookie for edge routing.

8. Changes to this policy

We may update this policy. Material changes will be indicated by updating the "Last updated" date above. Continued use of the service after changes constitutes acceptance.