Privacy policy

1. Data controller

CreaTuCV. For any question about your data: hola@creatucv.ai.

2. What data we process

• Account: your first name, last name, email address and, if you give it to us, your phone number. Your password is stored hashed (never in plain text). If you sign in with Google, Google gives us your name, email and profile photo.
• Profile and CVs: the content you enter (personal details, experience, education, skills), your photo if you upload one, and the generated PDFs.
• Job offers: the text or link of the offers you paste to tailor your CV.
• Payments: amount, date and transaction reference. Card details are processed directly by Stripe; we do not store them.
• Use of the service: what you do in the app (sign-up, tailoring, downloads, purchases) and the number of AI requests, to apply limits and improve the service.
• Reviews: the rating and text you send, and the shortened name it is published under if you allow it.
• Website visits: the page viewed, the site you came from, the type of device and your approximate country. They are counted without cookies and without storing your IP address: each visitor gets an identifier that changes every day and cannot be used to know who you are or to follow you from one day to the next.

3. Purposes and legal basis

• Providing the CV creation, tailoring and download service — performance of a contract.
• Managing your account and sending you service emails (verification, password recovery, receipts) — performance of a contract.
• Processing payments and issuing the invoice — performance of a contract and legal obligation.
• Preventing abuse and limiting AI usage — legitimate interest.
• Counting visits and measuring how the website is used to improve it — legitimate interest.

4. Providers (processors)

We share data with these providers, only to deliver the service:

• Vercel Inc. — hosting of the application and the files (photos and PDFs), in its Frankfurt region (EU).
• Neon — database where your account and CVs are stored, in its Frankfurt region (EU).
• Resend — sending service emails.
• Stripe — payment processing and invoicing.
• OpenAI — AI text generation from the content of your CV and the job offer, when you request a tailoring or import a CV.
• Google — only if you choose “Continue with Google” to sign in.

Each provider processes the data as a processor, under its data processing agreement. Where any of them processes data outside the European Economic Area, it does so with appropriate safeguards: the EU-US Data Privacy Framework or standard contractual clauses.

5. Retention

We keep your account and your CVs while the account is active. If you delete your account, your CVs, their PDFs and the AI usage records are deleted. Payment records are kept for the period required by tax law.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability. From your dashboard you can download your data and delete your account. You can also write to hola@creatucv.ai or lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. Cookies

We only use cookies needed to keep you signed in and to remember your language. See the Cookie Policy.