Privacy Policy - cvlevel

1. Introduction

Welcome to cvlevel ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at cvlevel.com (the "Service").

By accessing or using our Service, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

Account Information: Email address for authentication and account management
Resume Content: Personal details, work experience, education, skills, and other information you include in your resume or cover letter
Payment Information: Billing details processed securely through Stripe (we do not store full credit card numbers)
Communications: Messages you send to our support team

2.2 Automatically Collected Information

When you access our Service, we automatically collect certain information:

Usage Data: Pages visited, features used, time spent on the Service
Device Information: Browser type, operating system, device identifiers
Log Data: IP address, access times, referring URLs
Cookies: Small data files stored on your device (see Cookie Policy below)

3. How We Use Your Information

We use the collected information for the following purposes:

Service Delivery: To provide, maintain, and improve our resume builder and related features
Account Management: To create and manage your account, authenticate users
Payment Processing: To process subscription payments and prevent fraud
Communication: To send service-related emails, updates, and respond to inquiries
Analytics: To understand how users interact with our Service and improve user experience
Legal Compliance: To comply with applicable laws, regulations, and legal processes
Security: To protect against unauthorized access, maintain data security

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored securely using:

Cloud Infrastructure: Vercel (hosting), Supabase (database) - industry-leading platforms with SOC 2 compliance
Payment Data: Stripe (PCI DSS Level 1 certified payment processor)
Local Storage: Draft resume data stored locally in your browser (not transmitted to our servers unless you're authenticated)

4.2 Security Measures

We implement industry-standard security measures:

SSL/TLS encryption for data transmission
Secure authentication via magic links (passwordless)
Regular security audits and updates
Access controls and logging for administrative actions
Encrypted database storage

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

Service Providers: Third-party vendors who assist in operating our Service (e.g., Stripe for payments, Supabase for database hosting). These providers are contractually obligated to protect your data.
Legal Requirements: When required by law, court order, or governmental authority
Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
Consent: When you explicitly authorize us to share your information
Protection: To protect our rights, property, safety, or that of our users

6. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and associated data
Portability: Receive your data in a machine-readable format
Objection: Object to certain processing of your data
Withdraw Consent: Revoke consent for data processing (where applicable)

To exercise these rights, contact us at support@cvlevel.com.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

Essential Cookies: Required for authentication and core functionality
Analytics Cookies: Help us understand usage patterns (e.g., Google Analytics)
Preference Cookies: Remember your settings (e.g., dark mode preference)

You can control cookies through your browser settings. Note that disabling essential cookies may affect Service functionality.

8. Data Retention

We retain your personal information for as long as necessary to:

Provide the Service to you
Comply with legal obligations (e.g., tax records: 7 years)
Resolve disputes and enforce agreements

After account deletion, we may retain anonymized data for analytics purposes. Backups are deleted within 90 days.

9. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) to protect your data in accordance with this Privacy Policy and applicable laws.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. For material changes, we will notify you via email or prominent notice on our Service. Continued use after changes constitutes acceptance.

13. GDPR and CCPA Compliance

13.1 For EU Users (GDPR)

If you are located in the European Economic Area (EEA), you have specific rights under GDPR:

Legal basis for processing: Consent, contract performance, legitimate interests
Right to lodge a complaint with your local data protection authority
Data protection officer: support@cvlevel.com

13.2 For California Users (CCPA)

California residents have additional rights:

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of sale of personal information (we do not sell data)
Right to non-discrimination for exercising CCPA rights

14. Contact Us & Data Controller

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Service Operated by: Artem V. (Individual Entrepreneur)
Doing Business As: cvlevel
Tax ID (VAT): PL8992931986
Registered in: Poland, EU

Email: support@cvlevel.com

Response time: Within 48 hours

🇪🇺 For EU/EEA residents: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Polish Data Protection Authority (UODO) at uodo.gov.pl

Privacy at a Glance

🔒

Secure

SSL encryption, secure cloud storage, regular audits

🚫

No Selling

We never sell, rent, or trade your personal data

✓

Your Control

Access, update, or delete your data anytime