Privacy Policy

Last updated: 25 June 2026

1. Introduction

JobCV ("we", "our") is committed to protecting your personal data. This policy explains how we collect, use and protect your information when you use our resume creation and application management platform.

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• First and last name
• Email address
• Password (stored hashed — never in plain text)

2.2 Content You Create

The data you enter on the platform:

• Resumes (CVs), including personal data such as name, email, telephone, address
• Professional profiles with experience history
• Job vacancies and applications
• Signatures and digital stamps
• Uploaded documents (PDFs, Word, etc.)
• Email settings for application tracking

2.3 Payment Data

Payments are processed by Stripe, our payment partner. We do not store or directly process credit card data. Stripe is PCI DSS Level 1 certified and is compliant with the GDPR. Please consult the Stripe Privacy Policy.

2.4 Technical Data

• IP address and browser data (automatically collected by NextAuth.js for sessions)
• Session cookies (essential for the operation of the platform)
• Preference cookies (language, theme)

3. Purpose of Processing

We use your data to:

• Provide the resume creation and management service
• Generate resumes with AI based on your professional data
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, receipts, notifications)
• Monitor applications via email (when you configure email tracking)
• Improve and debug the platform
• Detect and prevent fraud or abuse

4. AI and Automated Processing

The platform uses artificial intelligence models (DeepSeek) to:

• Generate personalised resumes based on your professional profile
• Extract information from job vacancy text for automatic completion
• Generate interview preparation roadmaps

Your professional data is sent to the AI provider exclusively for processing and is not used for model training. Processing is carried out on demand and the data is not retained by the provider after completion.

5. Data Sharing

We do not sell, rent or share your personal data with third parties, except:

• Stripe — payment processing
• DeepSeek — AI processing for resume generation (only the data you submit for generation)
• Email providers (Gmail, Outlook, etc.) — when you configure email tracking
• Legal obligations — if required by law or court order

6. Storage and Retention

Your data is stored on servers in the European Union. We retain your data for as long as your account is active. You may request the total deletion of your account and data at any time through the platform Settings or by contacting us.

7. Security

We implement technical and organisational measures to protect your data:

• Encrypted communication via HTTPS/TLS
• Passwords stored with bcrypt hashing
• Secure session tokens via NextAuth.js
• Restricted access to data with mandatory authentication
• Email credentials encrypted with AES-256-GCM

8. Your Rights (GDPR)

As a data subject in the EU, you have the following rights:

• Access: Request a copy of your data
• Rectification: Correct incorrect data
• Erasure: Request the deletion of your data
• Portability: Receive your data in a structured format
• Objection: Object to the processing of your data
• Withdrawal: Withdraw consent at any time

To exercise these rights, contact us at the email below.

9. Cookies

We use only essential cookies for the operation of the platform (session, authentication) and preference cookies (language). Please consult our Cookie Policy for more details.

10. Changes to This Policy

We will notify users of significant changes to this policy via email or notification on the platform with at least 14 days' notice.

11. Contact

For questions about privacy or to exercise your rights:

Email: elizeucarlosc@gmail.com