Privacy Policy

We don't sell your data. We don't share it with third parties for advertising. We store only what we need to make CVCheck work, and you can delete your account at any time.

When you use CVCheck, we collect:

• The content you submit — your CV text (extracted from PDF or pasted directly). This is sent to Anthropic's Claude API to generate your analysis and is not stored beyond what's needed to show you your results.
• Your email address — if you create an account or sign in with Google. Used to identify your account, send analysis notifications, and contact you about your subscription.
• Payment information — handled entirely by Stripe. We never see or store your card number or payment details.
• Basic usage data — which features you use and anonymized page views. Used solely to improve the product.
• Your IP address — used to enforce the one free analysis limit for anonymous users. Not stored long-term.

Your CV content is sent to Anthropic's API to generate the analysis. Anthropic does not train models on API inputs — see their policy at anthropic.com/legal/privacy.

We save your analysis results to your account (if you're signed in) so you can access them later from your history. We do not read your analyses, sell them, or use them for any purpose other than displaying them to you.

We never sell personal data to third parties. We never use your data for advertising purposes.

We process your personal data under the following legal bases as defined by GDPR:

• Contractual necessity — to provide the service you requested (analyzing your CV, managing your account, processing payments).
• Legitimate interest — to improve the product using anonymized usage data and to prevent abuse.
• Consent — for optional communications such as job alert emails. You can withdraw consent at any time.

We use a single session cookie from Supabase to keep you signed in. We do not use advertising cookies, tracking pixels, or invasive third-party analytics. Your theme preference is stored in localStorage on your device.

Your data is stored on Supabase infrastructure hosted in the EU (Frankfurt region). Stripe stores payment details on their PCI-DSS compliant servers. Anthropic processes CV content on their servers — their infrastructure may be located outside the EU, but they are bound by their privacy policy and data processing terms.

We retain your account data and analyses for as long as your account is active. If you delete your account, we delete your personal data and analyses within 30 days. Anonymized, non-identifiable usage statistics may be retained longer for product improvement.

As a user in the EU/EEA, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — delete your account and all associated data from your account settings, or by emailing us.
• Portability — request your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — unsubscribe from job alerts at any time via the 1-click link in any email we send.

To exercise any of these rights, email us at hello@cvcheck.app. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Romania, this is the ANSPDCP.

CVCheck is a tool for job seekers, intended for users aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a minor has created an account, contact us and we will delete it promptly.

If we make significant changes to how we handle your data, we will update the date at the top of this page and notify you by email if you have an account.

The data controller for CVCheck is the individual operator behind cvcheck.app, based in Romania. For any privacy-related questions or requests, contact us at hello@cvcheck.app.