Privacy Policy

1. Who is responsible

AiCVBuilder is responsible for your personal data (the "controller"). Contact us at hello@aicvbuilder.app.

2. What we collect

• Account details: your name, email address and picture, and how you sign in (password, email code, or an account such as Google). Your password is handled by our sign-in provider and never seen by us.
• Your CVs: everything you write in them, including any photo and personal details you choose to add (for example nationality or date of birth), and earlier versions of each CV.
• Files you upload: an old CV you ask the AI to read (deleted straight after it's read) and your CV photo.
• Plan and usage: your plan, your PayPal subscription's number and status, the credit packs you buy, the AI credits you've used and the AI model you chose. PayPal handles your payment details; we never see your card.
• Emails: which emails we sent you and whether they were delivered, and your choice about optional emails.
• Technical data: cookies that keep you signed in, the devices and browsers you sign in with, and IP addresses, used for security and to stop abuse.

3. Why we use it

• To provide AiCVBuilder: your account, saving your CVs, making PDFs and Word files (to perform our contract with you).
• To run the AI features you ask for (to perform our contract with you).
• To take payments and manage your subscription (contract, and legal obligations such as tax records).
• To email you about your account, payments and AI credits (to perform our contract with you; the reminders about AI credits can be turned off under Plan and account).
• To keep AiCVBuilder secure and prevent fraud and abuse (our legitimate interest).
• To understand how AiCVBuilder is used, using counts and totals rather than individual CVs, and to answer you when you contact us (our legitimate interest).

4. AI processing

When you use an AI feature, the parts of your CV that the request needs (and any job advert or file you add) are sent to Anthropic, which provides the Claude AI models, to produce the answer. Under Anthropic's commercial terms, data sent this way isn't used to train its models. The answer comes back to you, and nothing changes in your CV until you choose to use it.

5. Who helps us

We use these service providers, who process data only on our instructions:

• Clerk: accounts and sign-in;
• Convex: our database and server functions, where your CVs are stored;
• UploadThing: storage for photos and uploaded files;
• Anthropic: the AI models;
• PayPal: payments and subscriptions (also responsible for its own processing);
• Resend: sending our emails to you;
• Vercel: hosting the website.

6. International transfers

Some of these providers process data outside the country where you live, including in the United States. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses.

7. How long we keep it

• Your account and CVs: until you delete them or your account. Each CV keeps up to 40 earlier versions.
• Uploaded CV files: deleted as soon as the AI has read them. Photos no CV uses any more: removed after about a day.
• Payment and subscription records: as long as tax and accounting laws require.
• When you delete your account, your data is deleted from our systems, and your PayPal subscription is cancelled.

8. Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, to restrict or object to how we use it, and to withdraw consent you've given. You can change most things yourself under Plan and account, including deleting your account. For anything else, email us. You can also complain to your data protection authority.

9. Children

AiCVBuilder isn't meant for children under 16, and we don't knowingly collect their data.

10. Security

Your data is sent over encrypted connections, every request is checked against the signed-in account, and only you can open your CVs.

11. Changes

We'll update this policy when what we do changes, and tell you about important changes before they apply.