Privacy Policy

CVStage (“we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use cvstage.com.

• •Account information: name, email address, password (encrypted)
• •CV data: employment history, education, skills, personal summary
• •Usage data: pages visited, features used, time spent, browser type. Analytics and session replay (Google Analytics, Microsoft Clarity, PostHog) run only after you accept cookies
• •Payment information: card and mobile-wallet payments are processed by ZainCash and we never store card numbers. For USDT payments we store the payment address, amount and transaction ID (TXID). Blockchain transactions are public and permanent
• •Communications: emails you send to our support team

• •To provide and improve our AI-powered CV and career tools
• •To process your subscription and send payment receipts
• •To send important service updates and security alerts
• •To analyze usage patterns and improve the platform (anonymized data only)
• •To provide customer support
• •We never sell your personal data to third parties
• •We never use your CV content for advertising purposes

• •Data is encrypted in transit (TLS) and at rest
• •Hosted on EU-based servers (Supabase, compliant with GDPR)
• •Access to personal data restricted to essential team members only

• •Supabase (database and authentication) — EU-based, GDPR compliant
• •Anthropic (AI processing) — CV text is sent to generate suggestions and is not used to train models
• •ZainCash (payment processing) and the public Tron blockchain (USDT payments)
• •Google Analytics, Microsoft Clarity and PostHog (analytics and session replay) — only after you accept cookies
• •Vercel Analytics and Speed Insights (page speed, no cookies)
• •Vercel (hosting) — SOC 2 Type II certified

• •Right to access: request a copy of all data we hold about you
• •Right to rectification: correct any inaccurate personal data
• •Right to erasure: delete your account and all associated data
• •Right to portability: export your data in JSON or PDF format
• •Right to restrict processing: limit how we use your data
• •Right to object: opt out of non-essential data processing

To exercise any right, email support@cvstage.com.

• •Active accounts: data retained as long as account is active
• •Deleted accounts: all data permanently deleted within 30 days
• •Payment records: retained for 7 years as required by law

See our Cookie Policy for full details on the cookies we use and how to manage them.

CVStage is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

We will notify you by email of any significant changes to this Privacy Policy. Continued use of CVStage after such notification constitutes acceptance of the revised policy.

For privacy-related questions or to exercise your rights: