Legal

GDPR Compliance

Last updated: June 2026

CVStage is fully committed to compliance with GDPR (EU) 2016/679.

1. Data Controller

CVStage is the data controller for personal data collected through cvstage.com.

Contact: support@cvstage.com

2. Legal Basis for Processing

Contract performance: Processing your CV data to provide our service
Legitimate interests: Improving our platform using anonymized analytics
Legal obligation: Retaining payment records as required by law
Consent: Sending marketing emails (you can withdraw consent anytime)

3. Your GDPR Rights

As an EU/EEA resident you have the following rights:

Right to be informed
This privacy policy explains our data practices in full.
Right of access
Email support@cvstage.com to request a copy of all data we hold about you.
Right to rectification
Update any inaccurate personal data from your account settings.
Right to erasure
Delete your account and all associated data from Settings, or email us.
Right to restrict processing
Contact us to limit how we use your data.
Right to data portability
Export your CV data as PDF or JSON from your account.
Right to object
Opt out of non-essential data processing at any time.
Right re: automated decisions
Our AI suggestions are advisory only — no automated decisions affect your legal rights.

4. Data Transfers

Your data is stored on EU-based servers. Any transfers outside the EU are protected by Standard Contractual Clauses (SCCs) as required by GDPR Chapter V.

5. Data Breach Notification

In the event of a data breach affecting your rights, we will notify you within 72 hours as required by GDPR Article 33. We will also notify the relevant supervisory authority without undue delay.

6. Data Protection Officer

For GDPR inquiries: support@cvstage.com

7. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority (known as the supervisory authority in your EU/EEA member state) if you believe your data rights have been violated.