Privacy Policy

Who Processes Your Data

The Data Controller is CVRaptor (Data Controller) (hereinafter “CVRaptor” or the “Service”). For any privacy-related request or to exercise your rights, contact support@cvraptor.com.

This notice explains how we collect and use personal data when you use the website and services available at https://cvraptor.com.

Types of Data Processed

• Account data (if applicable): name, email, credentials (securely stored), settings and preferences.
• Usage/technical data: security logs, device/browser identifiers, IP address (for fraud prevention and security), visited pages, date/time.
• Submitted content: CVs, Job Descriptions, and text or documents uploaded for ATS analysis/optimization.
• Payment data (paid plans only): managed by third-party payment processors (e.g., Stripe). CVRaptor does not store full card numbers.
• Cookies and similar technologies: essential cookies required for service operation; any analytics/marketing cookies are used only with your explicit consent via cookie banner.

Purposes and Legal Bases (Art. 6 GDPR)

• Service provision (Art. 6.1.b): account creation and management, CV analysis/rewrite, and related functions.
• Security, fraud prevention, and legal defense (Art. 6.1.f – legitimate interest): technical logging, abuse prevention, judicial protection.
• Billing and compliance (Art. 6.1.b/c): payments and tax/accounting obligations via third-party providers.
• Statistical/marketing analytics (Art. 6.1.a – consent): activated only if you give cookie consent.
• Service communications (Art. 6.1.b/f): messages regarding plan, renewals, technical or contractual updates.

Use of AI Models

The Service may use artificial intelligence models to analyze and rewrite content (e.g., CVs, cover letters). Such processing serves editorial assistance purposes and does not produce legal or similarly significant effects for users. You are responsible for reviewing the results before using them. Security filters may be applied to prevent misuse.

Processing and Data Retention

Data are processed using appropriate technical and organizational measures (encryption in transit, access controls, security logs, backups). We retain data only for as long as necessary for the stated purposes:

• Account: until closure, and up to 12 months thereafter for legal protection.
• Technical logs: typically 90–180 days, unless required for security/fraud.
• Billing: according to applicable legal retention terms.
• Uploaded content: for as long as needed to deliver requested features and ensure service quality and security.

Recipients (Processors and Sub-processors)

We share data with vendors acting as Data Processors (Art. 28 GDPR) to provide infrastructure and functionality, including for example:

• Hosting/CI/CD: Vercel or equivalent providers.
• Payments: Stripe (and related sub-processors).
• Email: sending/relay services (e.g., Resend, ImprovMX).
• Analytics/monitoring (if enabled with consent).

These parties process data under agreements that define instructions, security, and confidentiality obligations. The current list of main processors is available on request at support@cvraptor.com.

International Data Transfers

If data are transferred outside the European Economic Area, we apply appropriate safeguards (e.g., Standard Contractual Clauses) and additional measures where required, in accordance with Articles 44–49 GDPR.

Your Rights

You can exercise your rights under Articles 15–22 GDPR (access, rectification, erasure, restriction, portability, objection). You can also withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

For privacy requests, contact support@cvraptor.com. You have the right to lodge a complaint with your competent Data Protection Authority.

Minors

The Service is not intended for users under 16 and does not knowingly collect their data. If we become aware of such data, we will promptly delete them.

Cookies and Preferences

We use only essential technical cookies. Any third-party cookies (analytics/marketing) are activated solely with your explicit consent via banner. You can change preferences at any time through the banner or browser settings. For more details, see the Cookie Policy.

Security

We apply security measures proportionate to the risk (TLS, access protection, logging, monitoring). No measure can guarantee absolute security, but we maintain a program of continuous improvement.

Changes to This Notice

We may update this notice to comply with legal or service changes. Updates will be published on this page and become effective upon posting. If changes are material, we may notify you directly.

Note: this document provides a standard informational baseline for SaaS services like CVRaptor. It does not replace professional legal advice.