GDPR Information

1. Categories of personal data

Depending on how you use the service, we may process the data you add to your CV, including your name, email address, phone number, city, LinkedIn profile, professional summary, experience, education, skills, languages, certifications, and photo if you choose to upload one.

2. Purposes of processing

• editing and customizing the CV directly in the browser;
• starting and verifying payment for PDF export;
• generating and delivering the secure PDF after payment confirmation;
• preventing abuse, fraud, and technical failures;
• complying with applicable legal obligations.

3. Legal bases

• performance of the service you request;
• legitimate interest in securing the platform and preventing misuse;
• legal obligations related to financial records and compliance;
• your consent where you choose to provide optional data.

4. Recipients and service providers

Stripe is used for payment processing. The technical infrastructure may also involve hosting providers and other services required to keep the application running. Card details are not stored by CVPerfect.online in the current implementation; they are processed by Stripe according to Stripe's own policies and security standards.

5. Storage and retention

In the current flow, CV editing happens mainly inside your browser. For checkout, a technical document identifier is sent to the server, and for PDF generation the data needed to render the file is sent as part of that request. The current codebase does not show a dedicated database for archiving CVs, but some purchase-session data may remain temporarily in the browser, including in `localStorage`, until the download is completed or until you clear the site data yourself.

6. Your rights

• the right of access;
• the right to rectification;
• the right to erasure, where legally applicable;
• the right to restriction of processing;
• the right to object;
• the right to data portability;
• the right to lodge a complaint with the competent authority.

7. How to exercise your rights

For requests related to personal data, use the contact channel shared by the operator of CVPerfect.online during the commercial relationship or in the contact details displayed on the site. Where required by law, we may ask for minimal information to verify identity before responding.

8. Security measures

Reasonable technical and organizational measures are used to limit unauthorized access, protect the payment flow, and reduce the risk of improper modification or disclosure of data.