CVWriter
Back to home

Privacy Policy

Last updated: 21 June 2025

CVWriter (“we”, “us”, “our”) operates cvwriter.app, a service that helps you import, edit, and export CVs with optional AI assistance. This policy explains what personal data we process and why.

Who we are

CVWriter is operated at cvwriter.app. For privacy enquiries, contact us at privacy@cvwriter.app.

Data we collect

  • Account data — when you sign in with Google, we receive your name, email address, and profile picture from Google.
  • CV content — text and structure you upload, edit, or generate, including contact details, work history, education, and skills.
  • Uploaded files — PDFs you import as CV sources.
  • Preferences — optional settings such as target role, language, and relocation intent.
  • Technical data — session cookies required for authentication, and standard server logs (IP address, browser type, timestamps).

How we use your data

  • Provide the service: store your CVs, render PDF exports, and sync your account.
  • Generate AI suggestions when you explicitly request a review or role suggestions.
  • Authenticate you and keep your session secure.
  • Improve reliability, security, and support.

We do not sell your personal data. We do not use your CV content for advertising profiles.

AI processing

When you click Review with AI or request role suggestions, relevant CV content and preferences are sent to our AI provider (OpenAI) to generate suggestions. We do not run AI on your CV automatically without your action. AI output is advisory — you choose what to apply.

Legal basis (GDPR)

  • Contract — processing needed to provide the service you signed up for.
  • Consent — optional AI features and non-essential preferences where applicable.
  • Legitimate interest — security, fraud prevention, and service improvement, balanced against your rights.

Where data is stored

We aim to host personal data on servers located in the European Union. Data is encrypted in transit (TLS) and at rest where supported by our infrastructure providers.

Third parties

We share only what is necessary for each service to function. Sub-processors are bound by contractual data protection obligations where applicable.

Retention

We keep your account and CV data until you delete it or close your account. Server logs are retained for a limited period for security and troubleshooting, then deleted or anonymised.

Your rights

If you are in the EU/EEA or UK, you may have the right to access, rectify, erase, restrict, or port your data, and to object to certain processing. You may also lodge a complaint with your local supervisory authority.

To exercise your rights, email privacy@cvwriter.app. We respond within one month where required by law.

Children

CVWriter is not intended for users under 16. We do not knowingly collect data from children.

Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance of the revised policy.

See also our Terms & Conditions.