Privacy Policy

Last updated: June 2025

Data Controller

CVfive (cvfive.com) is the data controller for personal data processed through this service. For privacy questions or requests, contact us at hello@cvfive.com.

What We Collect

We collect account information such as your email address and name (via Google OAuth), CV data you enter in the app, billing information processed through Lemon Squeezy (we do not store card details), and usage data through Google Analytics.

Legal Basis (GDPR)

We process personal data based on contractual necessity (account access and CV storage), legitimate interest (analytics and security), and legal obligation (invoicing and required record keeping).

How We Use Data

We use data to provide and improve the service, process payments, send transactional emails, protect platform security, and comply with legal obligations.

Data Retention

Account data is retained until you request deletion. CV data is removed when you delete your CVs or your account. Billing records are retained for 10 years to meet legal requirements.

Third Parties

We work with Google (Firebase Auth and Analytics), Lemon Squeezy (payments), and Anthropic (AI features). For AI features, CV text may be sent for processing and is not stored by Anthropic beyond the request.

Your GDPR Rights

You have the right to access, rectification, erasure (right to be forgotten), portability, and objection. To exercise your rights, email hello@cvfive.com.

Cookies

We use essential cookies for authentication sessions and analytics cookies through Google Analytics. Analytics cookies can be declined.

International Transfers

Some data may be processed on Firebase servers in the United States. Where required, Standard Contractual Clauses are used for international data transfers.

Contact

For any privacy-related request or question, contact us at hello@cvfive.com.