Privacy policy
Last updated: October 11, 2026
In short
We collect only what the service needs. Your CV file is not stored. Your results stay in your account until you delete them. We don't sell data and don't use ad trackers.
Who is responsible
FOP [Full legal name], Ukraine, is the controller of your personal data. Contact: hello@getcvmax.com.
What we collect
- Email list: your email, which site sent you (for example youtube) and your country from the network request.
- Account: your email and name from Google sign-in. We never see your password.
- Your CV: the file and its text are processed to give you results. The file itself is not stored.
- What you type: your target job, the job ad you paste, your answers to the questions.
- Results: reviews, rewrites and built CVs saved in your account. They can quote your CV.
- Usage counters: how many actions you used today, so the daily limits work.
- Learning events: short records of how the tool is used, saved under your email when you are signed in, or under a random anonymous id when you are not. They hold the review prompt version used and the score, the number of suggested edits and gaps, whether you rated the review, how many suggested edits you accepted out of how many, whether you answered or skipped a Q&A question, which learning resources you opened or rated (resource ids only), a short skill name when we had no learning resource for it, the job search region and a coded form of the role you searched for (no role name), which job postings you marked as applied (source and fit only), your answer to "Did this CV get you an interview?", and counts of reviews, exports and downloaded share cards. They never contain CV text or job posting text.
- Site statistics: page views counted by Cloudflare Web Analytics without cookies and without identifying you.
Why
- To give you the review and keep your results.
- To email you once when something new ships, if you joined the email list.
- To see which advice helps people, using the text of edits without CV files.
- To learn which review versions, edits and learning resources actually help, from the learning events above, and to improve the coach for everyone.
Legal basis
Performing our contract with you (reviews), your consent (email list, CV upload), and our legitimate interest in keeping the service secure and improving it.
Who processes data for us
- Anthropic (Claude API, USA): the AI model that reads your CV. Under Anthropic's commercial terms it may not train its models on this content. Anthropic deletes inputs and outputs from its systems within 30 days, and may keep content longer only if its safety systems flag a policy violation.
- Supabase (EU, Frankfurt): database for accounts, results, usage counters and the email list.
- Railway (EU): runs the app.
- Cloudflare: this website, email forwarding and cookieless statistics.
- Google: sign-in.
Some providers process data outside the EU under standard contractual clauses.
How long we keep it
- CV file: only while it is being processed.
- Results, profile and counters: until you delete them.
- Learning events saved under your email: until you delete your data from My account. Events saved under an anonymous id are not linked to you, so we cannot find and delete them.
- Email list: until 12 months after launch or until you ask us to remove you.
Your rights
You can access, correct, export or delete your data, and withdraw consent at any time. Delete everything from your account page, or email hello@getcvmax.com. You can also complain to your data protection authority.
Cookies
Only technical cookies needed for sign-in and the app session. No advertising or tracking cookies.
Age
GetCVmax is for people aged 18 and over.
Changes
If we change this policy, the new version appears here with a new date.