This policy explains what personal data CV Shop collects, why, and how you control it. It is written to follow the EU and UK General Data Protection Regulation (GDPR) and Saudi Arabia's Personal Data Protection Law (PDPL).
Who we are
CV Shop ("we") helps you write CVs, cover letters and official letters at cvshop.app. You can reach us at support@cvshop.app.
What data we collect
Your account: your name, email address and password (stored as a secure hash, never readable by us), your language and region settings.
Your documents: what you write in your CVs and letters, such as work history, education, skills and, only if you add them, a photo and personal details like nationality or date of birth.
Website visitors: necessary cookies and, only if you accept them, analytics cookies.
Why we use it
- To provide the service: save your documents, show them in two languages, and make PDF files.
- To run AI features you ask for (for example "translate" or "improve this bullet").
- To keep the service safe and prevent abuse (for example, limiting repeated requests).
- To reply when you contact us.
- To improve the service, using totals that do not identify you.
We do not sell personal data. We never build contact lists or send marketing emails to people who are not our users.
AI features
When you use an AI feature, the text needed for that request is sent to our AI provider, Anthropic, to produce the result. It is not used to train AI models. We ask the AI not to invent achievements or numbers; you always review the result before using it.
Legal basis
We process your data to provide the service you signed up for (contract), with your consent where required (such as optional cookies), for our legitimate interest in keeping the service secure, and to meet legal obligations.
Where your data is stored
Our database is hosted in Frankfurt, Germany (European Union), with encrypted connections. Some providers listed below may process data in other countries under appropriate safeguards such as standard contractual clauses.
Service providers
We use trusted providers to run CV Shop: Supabase (database and sign-in), Vercel (website hosting), Anthropic (AI features), Paddle (payments, as merchant of record), Upstash (abuse protection) and our email provider for account emails. They only process data to provide their service to us.
How long we keep data
We keep your account and documents while your account is open. When you delete your account, we delete it and your documents after a 14-day grace period in which you can change your mind.
Your rights
You can see and change your data in the app, download a copy of it (Account → Download my data), and delete your account (Account → Delete my account). You can also ask us to access, correct, restrict or delete your data, object to processing, or withdraw consent. Email support@cvshop.app. If you are in the EU or UK you can also complain to your data protection authority.
Cookies
Necessary cookies remember your language, keep you signed in and remember your cookie choice. Optional analytics cookies are only used if you choose "Accept all" in the cookie banner.
Public CV links
If you choose to publish a CV link, only the CV you publish is visible to people with the link. You can unpublish it anytime.
Security
We use encrypted connections, access controls, and database rules that keep every person's data separate.
Children
CV Shop is for people aged 16 and over.
Changes to this policy
We will post any changes on this page and update the date above.
Contact
Questions about privacy: support@cvshop.app.