Privacy Policy

Account data: email address, name if given, your login credentials, language and job preferences.

Documents you upload: CVs, cover letters and the job adverts you paste in. A CV often contains a photograph, date of birth or nationality, and may contain information you consider sensitive. You choose what to upload; in Italy a photo is not needed.

Usage data: pages viewed, features used, approximate location derived from IP, device and browser, and session recordings used to find errors. Payment data: subscription status and billing identifiers from Stripe. We never receive your full card number.

To provide the Service and perform our contract with you: running your account, generating CV checks, letters and interview material, and processing payments.

On the basis of your consent: job-alert and blog emails, which you can withdraw at any time using the unsubscribe link in any message or in your account settings. Withdrawal does not affect processing already carried out.

On the basis of our legitimate interests: keeping the Service secure, preventing abuse, and understanding in aggregate how it is used so it can be improved.

To meet legal obligations, including accounting retention for invoices.

We do not sell personal data and we do not share your CV with employers. Your documents are not visible to other users.

We use providers who act on our instructions: Amazon Web Services (hosting, authentication, file and database storage, in the Frankfurt region, eu-central-1); Stripe (payments; with Stripe Managed Payments, Stripe may act as reseller and then processes your payment data for its own purposes); PostHog (product analytics, hosted in the EU); Resend (service and alert email); and the AI providers Amazon Bedrock (AWS, eu-central-1), Anthropic, OpenAI and Groq, which receive the text of a CV or job advert to produce the analysis or draft you asked for.

Some of these providers are outside the European Economic Area, including in the United States. Those transfers rely on the European Commission's standard contractual clauses and, where it applies, the relevant adequacy decision (EU-US Data Privacy Framework).

When you use the CV check, CV editor, cover-letter generator or interview tools, the content you supplied is sent to a third-party language model to produce the result. We ask these providers not to train their models on our customers' data, and we rely on their contractual commitments to that effect.

If you would rather this did not happen to a particular document, do not upload it. The rest of the Service works without it.

Account data for as long as your account exists. Uploaded documents until you delete them or close your account. Invoices for ten years. Analytics in aggregated form, from which you cannot be identified.

You may request access to your data, correction, deletion, restriction of processing and a portable copy, and you may object to processing based on legitimate interests. You may withdraw consent to email at any time. After a person's death, these rights may be exercised by someone with an interest of their own or acting to protect that person (article 2-terdecies of Legislative Decree 196/2003).

Write to info@crearecv.com and we will respond within one month.

You may lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it.

We set cookies that are necessary for the Service to function, including your session and language preference. Analytics cookies are used to understand feature usage. You can clear or block cookies in your browser; the Service may not work correctly without the necessary ones.

Data is encrypted in transit and at rest. Access is restricted to those who need it to operate the Service. No system is perfectly secure, and we will notify you and the Garante of a breach where the law requires.

We will post any change here and update the date above. Material changes will be notified by email.