Privacy Policy

CVStage (“we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use cvstage.com.

• •Account information: name, email address, password (encrypted)
• •CV data: employment history, education, skills, personal summary
• •Usage data: pages visited, features used, time spent, browser type
• •Payment information: paid plans are not yet live; once launched, payment data will be processed securely by Paddle and we will never store card numbers
• •Communications: emails you send to our support team

• •To provide and improve our AI-powered CV and career tools
• •To process your subscription and send payment receipts
• •To send important service updates and security alerts
• •To analyze usage patterns and improve the platform (anonymized data only)
• •To provide customer support
• •We never sell your personal data to third parties
• •We never use your CV content for advertising purposes

• •All data encrypted in transit using TLS 1.3
• •All data encrypted at rest using AES-256
• •Hosted on secure EU-based servers (Supabase, compliant with GDPR)
• •Regular security audits and penetration testing
• •Access to personal data restricted to essential team members only

• •Supabase (database and authentication) — EU-based, GDPR compliant
• •Anthropic (AI processing) — CV text processed to generate suggestions, not stored by Anthropic
• •Paddle (payment processing, integration in progress) — PCI DSS Level 1 certified
• •Vercel (hosting) — SOC 2 Type II certified

• •Right to access: request a copy of all data we hold about you
• •Right to rectification: correct any inaccurate personal data
• •Right to erasure: delete your account and all associated data
• •Right to portability: export your data in JSON or PDF format
• •Right to restrict processing: limit how we use your data
• •Right to object: opt out of non-essential data processing

To exercise any right, email support@cvstage.com.

• •Active accounts: data retained as long as account is active
• •Deleted accounts: all data permanently deleted within 30 days
• •Payment records: retained for 7 years as required by law

See our Cookie Policy for full details on the cookies we use and how to manage them.

CVStage is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

We will notify you by email of any significant changes to this Privacy Policy. Continued use of CVStage after such notification constitutes acceptance of the revised policy.

For privacy-related questions or to exercise your rights: