Privacy Policy
Last updated: March 2026
1. Data controller
The data controller for personal data collected via CVChecker is CVChecker, a sole trader operating under French law. For any questions regarding your data, contact us at contact@cvchecker.io.
2. Data collected
We collect the following data:
- Email address — when creating an account or signing in via Google.
- CV content — text submitted for analysis or optimized CV generation.
- Job posting — optional text submitted for matching analysis.
- Billing data — processed directly by Stripe; CVChecker stores no banking data.
- Session data — technical cookies required for authentication.
3. Purposes
Your data is used exclusively to:
- Provide CV analysis and optimization services.
- Manage your account and credit balance.
- Process your payments and generate purchase confirmations.
- Ensure service security and prevent abuse.
4. Legal basis
Processing of your data is based on the performance of a contract (service delivery) and, for billing data, on a legal obligation. No processing is carried out on the basis of legitimate interest or separate consent unless otherwise stated.
5. Sub-processors and third parties
CVChecker uses the following service providers:
- Supabase — database hosting (authentication, analysis storage). Data hosted in Europe (AWS eu-west-3).
- Anthropic — AI models used for CV analysis and generation. Data sent to Anthropic is not used to train their models (zero data retention agreement).
- Stripe — payment processing. CVChecker never receives your banking data.
- Vercel — application hosting (serverless infrastructure, Europe).
- Resend — transactional email delivery.
- Google — OAuth authentication (Google Sign-In). When you sign in with Google, Google processes your email address and authentication data in accordance with Google's Privacy Policy.
6. Data retention
Account data is retained for as long as your account is active. Analyses are retained so you can consult them later. You may request deletion of your data at any time by contacting us.
7. Your rights (GDPR)
Under the GDPR, you have the following rights:
- Access — obtain a copy of your data.
- Rectification — correct inaccurate data.
- Erasure — request deletion of your data.
- Portability — receive your data in a structured format.
- Objection — object to a specific processing activity.
- Restriction — request restriction of processing.
To exercise these rights, contact us at contact@cvchecker.io. You may also lodge a complaint with your local supervisory authority (in France: CNIL).
8. Cookies
CVChecker uses only strictly necessary technical cookies for service operation (session management, authentication). No advertising, tracking or profiling cookies are used.
9. Security
CVChecker implements appropriate technical and organizational measures to protect your data against unauthorized access, loss or disclosure: encrypted communications (HTTPS), restricted data access, secure infrastructure.
10. Changes
This policy may be updated. In the event of a material change, you will be notified by email. The last update date is shown at the top of this page.