Privacy Policy
Last updated: 8 November 2026
CVWriter (“we”, “us”, “our”) operates cvwriter.app, a service that helps you import, edit, and export CVs with optional AI assistance. This policy explains what personal data we process and why.
Who we are
CVWriter is operated at cvwriter.app. For privacy enquiries, contact us at privacy@cvwriter.app.
Data we collect
- Account data — when you sign in with Google, we receive your name, email address, and profile picture from Google.
- CV content — text and structure you upload, edit, or generate, including contact details, work history, education, and skills.
- Uploaded files — PDFs you import as CV sources.
- Conversations and language versions — messages you send to the CV assistant, its responses, and translated CV versions are saved with your CV. Voice recordings are processed for transcription and are not saved by CVWriter; the transcript is saved as a message only if you send it.
- Preferences — optional settings such as target role, language, and relocation intent.
- Technical data — session cookies required for authentication, and standard server logs (IP address, browser type, timestamps).
How we use your data
- Provide the service: store your CVs, render PDF exports, and sync your account.
- Extract, translate, and merge imported CVs, and generate suggestions when you request AI features.
- Authenticate you and keep your session secure.
- Improve reliability, security, and support.
We do not sell your personal data. We do not use your CV content for advertising profiles.
AI processing
Importing a PDF or pasted text, importing LinkedIn data, and re-merging sources send CV text or profile data and relevant preferences to OpenAI for extraction, translation, and merging. Review with AI and role suggestions also send relevant CV content and preferences to OpenAI. Direct contact details are excluded from writing reviews where possible. Chat sends your messages and current CV to OpenAI. Voice input sends the recording to OpenAI for transcription; you can edit the transcript before sending it as a chat message. Creating or updating a language version sends the selected source version for translation. AI output can be inaccurate: check names, dates, responsibilities, and translations before using it. Manual editing and PDF export do not require AI processing.
Legal basis (GDPR)
- Contract — processing needed to provide the service you signed up for.
- Consent — optional AI features and non-essential preferences where applicable.
- Legitimate interest — security, fraud prevention, and service improvement, balanced against your rights.
Where data is stored
We use hosting and AI providers to deliver this service. Processing locations and safeguards can differ between providers, including for AI requests. We do not promise that all processing stays exclusively within the European Union. Contact us for information about the current hosting arrangements and applicable safeguards before uploading information with specific residency requirements.
Third parties
- Google — OAuth sign-in (Google Privacy Policy).
- OpenAI — CV import, translation, merging, and suggestions when you request them (OpenAI Privacy Policy).
- Cloudflare — frontend hosting and content delivery (Cloudflare Privacy Policy).
We share only what is necessary for each service to function. Sub-processors are bound by contractual data protection obligations where applicable.
Retention
Saved CVs and uploaded sources remain in your account until deleted. Removing a source deletes the source file, while information already included in your edited CV remains until you edit or delete the CV. New PDF exports are generated for download without being stored as additional server files. Older stored exports may remain until maintenance removes them. Session records expire after seven days. Daily request counters expire and are cleaned up during subsequent use. Unsaved drafts and unfinished setup may be kept in this browser tab for recovery for up to 24 hours; they are cleared on sign-out. Browser tab storage can be unavailable or lost, so use Save for durable storage. Contact us about account deletion and backup or log retention.
Your rights
If you are in the EU/EEA or UK, you may have the right to access, rectify, erase, restrict, or port your data, and to object to certain processing. You may also lodge a complaint with your local supervisory authority.
To exercise your rights, email privacy@cvwriter.app. We respond within one month where required by law.
Children
CVWriter is not intended for users under 16. We do not knowingly collect data from children.
Changes
We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance of the revised policy.
See also our Terms & Conditions.