Privacy Policy

• Account: your email, name, and a hashed password (handled by our auth provider - we never see the plain password). If you sign in with Google, we receive your email and name from Google.
• Career data you give us: your CV, work history, skills, achievements, and the answers you give to tailoring questions. This is the heart of the product and it's sensitive - we treat it that way.
• Generated documents: the CVs and cover letters the service produces for you.
• Profile photo (optional): if you add one, it appears only on the CV and letter designs that have a photo slot. We crop and re-save it on upload, which also removes camera metadata such as location, we never analyse it, and it is never sent to the AI model. Remove it any time from your profile; deleting your account deletes it.
• Usage & billing: token counts and the cost of each AI action (for metering) - never the content of prompts or responses. Payment is handled by Stripe; we store your customer and subscription IDs, not your card number.

You can upload a CV and see how it scores against a real job before you sign up. No AI model sees anything in this step: the score and the match are worked out by our own code. The upload is checked by Cloudflare Turnstile to keep bots out (see sub-processors below). While you try it, we keep:

• What you upload and choose: the text of your CV and its score, the region and role you pick, the job ad you pick from our feed or paste in, and the match result for that job.
• Where you came from: your answer to "where did you hear about us", if you give one; any utm_ tags, gclid or fbclid in the link you arrived by; and the name of the site that sent you (only its host name, never the full address).
• When you reached each step, so we can see where people stop.
• "Delete what I uploaded" is on every step after the upload. It removes the trial record straight away, with no account needed.
• One cookie, cvf_trial, which holds only the id of your trial record. See Cookies below.

• To provide the service (contract): generating, scoring, and storing your applications, and billing you for it.
• Before you have an account: scoring your CV and matching it to a job are steps you ask us to take before entering a contract with us (GDPR Art. 6(1)(b)). Recording where you came from and which steps you reached is our legitimate interest in knowing which channels and steps work (Art. 6(1)(f)).
• Your consent: processing your career data with AI, and the optional job-match email digest. You give this explicitly at signup and can withdraw it by deleting your account or turning the digest off.
• Legitimate interest: keeping the service secure and preventing abuse (rate limiting, fraud and abuse prevention).

To write and analyse your applications, we send the relevant career data to Anthropic (the maker of Claude). Anthropic processes it to return the generated text and nothing more. Our API access is configured so your data is excluded from training their models. We don't store the model's intermediate reasoning or the raw prompt/response bodies; we keep the final documents, which are yours.

We use a small set of vetted providers to run the service. Each is bound by a data processing agreement, and for transfers outside the EU, by Standard Contractual Clauses.

• Uploaded source CVs are deleted after we extract their content, unless you choose to keep them.
• Your profile, applications, and documents are kept until you delete them or close your account.
• Your profile photo is kept until you remove it or delete your account.
• Trial records (before an account) expire 7 days after you start. If no account has taken the record over by then, a daily clean-up deletes all of it by the next day. If you create an account, or log in to one you already have, the job ad moves into it; a new account also gets your CV, region and role, while an account that is already set up keeps its profile as it is. The CV text, the job text, the score and the match are then removed from the trial record, at the latest when the 7-day trial expires. What is left (the region, role and feed job you picked, the page language, where you came from and when you reached each step) is kept 90 days after the record joined your account, to measure the sign-up flow, then deleted. If you delete your account sooner, that record is unlinked from you and still deleted on the same schedule.
• Billing records are retained by Stripe for as long as tax and accounting law requires, even after you delete your account.

Under the GDPR you can exercise all of the following - most of them directly in the app, today:

• Access & portability: download a complete copy of your data from Account → Your data → Export.
• Erasure: permanently delete your account and all associated data from the same page. This cascades through our database, purges your stored documents, and cancels any subscription.
• Rectification: edit your profile and documents at any time.
• Withdraw consent / object: by deleting your account or turning off the digest.

You also have the right to complain to a supervisory authority. In Sweden that's Integritetsskyddsmyndigheten (IMY).

Your data is isolated at the database level - row-level security means one user's rows are never reachable by another, even if application code had a bug. Data is encrypted in transit, documents are served only through short-lived signed links, and AI keys live exclusively on the server, never in your browser.

• Essential cookies keep you signed in and secure the session. These are always on - the service can't work without them - and need no consent.
• cvf_trial (essential): holds only the id of your trial record, so the steps you take before signing up stay together. It is HttpOnly (no script on the page can read it), lasts 7 days, and is set only when you upload a CV, never when you just visit. It is removed when you delete the trial or when an account takes it over. Because it is strictly necessary for the service you asked for, it needs no consent (Swedish Electronic Communications Act, LEK 9 kap. 28 §).
• Analytics cookies (Google Analytics 4): we use these to measure traffic and improve the product. They load only after you accept on the cookie banner - decline and no analytics script ever runs. You can change or withdraw your choice any time via the "Cookies" link in the footer.

We use no third-party advertising or cross-site ad-tracking cookies. Your analytics choice is stored locally in your browser, not in an account.

The service isn't intended for anyone under 16, and we don't knowingly collect their data.

If we change this policy we'll update the effective date and, for material changes, tell you in the app or by email. Reach us any time at privacy@cvfriend.com, CVFriend, Stockholm, Sweden.