Privacy Policy

1. Data Controller

The controller responsible for processing personal data collected by CV Creator Pro is AndaMarca, operator of the service available at cvcreatorpro.com.

Contact: [email protected]

2. Data We Collect

We collect the following personal data:

• Account data — name, email address and password (stored with bcrypt hashing, never in plain text)
• CV data — professional information entered or imported (experience, education, skills, contact details)
• Usage data — features used and session logs, for service improvement
• Payment data — processed directly by Stripe; we do not store credit card data

3. Purposes and Legal Basis

• Service provision (contract performance) — creating and managing your account, generating and exporting CVs, processing subscriptions
• Transactional communications (contract performance) — registration confirmations, password recovery, account alerts
• Service improvement (legitimate interest) — aggregated and anonymous usage analysis
• Legal obligations — retention of billing records for the period required by law

4. Local AI

CV Creator Pro uses artificial intelligence processed locally on our own server via Ollama. CV data and prompts are not sent to external AI services (OpenAI, Google or others). All processing takes place on our infrastructure.

5. Sharing With Third Parties

We do not sell your data. We share information only with:

• Stripe — payment processor for managing subscriptions
• Cloudflare — network protection and performance, processes traffic data anonymously
• Brevo (Sendinblue) — sending transactional emails
• Competent authorities — when required by law or court order

6. Data Retention

• Account and CV data — retained while the account is active; deleted within 30 days of account deletion
• Billing records — retained for 10 years, per statutory tax obligations
• Technical logs — retained for 90 days for error diagnosis

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access — request a copy of the data we hold
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Restriction — request restriction of processing in certain circumstances

To exercise any of these rights, contact [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the CNPD — Portuguese National Data Protection Authority.

8. Security

We implement appropriate technical and organizational measures to protect your data: encrypted communications via HTTPS/TLS, bcrypt-hashed passwords and restricted database access.

9. Changes to This Policy

We may update this policy periodically. In the event of material changes, registered users will be notified by email. The update date is always shown at the top of this page.

10. Contact

AndaMarca
Email: [email protected]