Privacy Policy

CVWon is an AI-powered CV builder operated by CVWon.com, located at Sofitel Downtown, 1601-1607 Sheikh Zayed Road, Dubai, United Arab Emirates.

This privacy policy explains how we collect, use, store and protect your personal data when you use our website at cvwon.com and related services.

Account data. When you register, we collect your name, email address and password (stored as a secure hash). If you sign in via a social provider, we receive your name and email from that provider.

CV content. Work experience, education, skills and any other information you enter into your CV. This data is stored encrypted at rest.

Usage data. Pages visited, features used, session duration and interactions within the platform.

Payment data. Payments are processed by Stripe. We do not store full card numbers. We retain a tokenised reference, billing address and transaction history.

Technical data. IP address, browser type, operating system, device type, referring URL and access timestamps collected automatically via server logs.

We use your personal data to:

• Provide, maintain and improve our CV builder and related services.
• Generate AI-powered CV suggestions, scoring and optimisation using the Anthropic Claude API. Your CV content is sent to Anthropic for processing and is not used by Anthropic to train their models.
• Process payments and manage subscriptions via Stripe.
• Send transactional emails (account confirmation, password resets, subscription notifications) via Postmark.
• Analyse platform usage and improve user experience via Google Analytics 4 (only with your consent).
• Comply with legal obligations and protect against fraud.

We process your data under the following legal bases as defined by GDPR Article 6:

• Performance of a contract (Art. 6(1)(b)): Processing your account and CV data is necessary to deliver the service you have signed up for.
• Consent (Art. 6(1)(a)): Analytics cookies and non-essential data processing only occur with your explicit consent, which you may withdraw at any time.
• Legitimate interest (Art. 6(1)(f)): Technical data processing to ensure platform security, prevent abuse and improve our services.
• Legal obligation (Art. 6(1)(c)): Retention of billing records as required by tax and commercial law.

We share data with the following third-party processors, each under appropriate data processing agreements:

We retain your personal data only as long as necessary for the purposes described above:

• Account data & CV content: Kept for the lifetime of your account. After you delete your account, all personal data and CV content is permanently erased within 30 days.
• Payment records: Retained for up to 10 years as required by tax and commercial law.
• Server logs: Automatically purged after 90 days.

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data (subject to legal retention requirements).
• Restriction — limit how we process your data.
• Data portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interest.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email privacy@cvwon.com. We will respond within 30 days.

You also have the right to lodge a complaint with a relevant supervisory authority. For any privacy concerns, contact us at privacy@cvwon.com.

For detailed information about the cookies we use, please see our Cookie Policy.

If you have any questions about this privacy policy or how we handle your data, contact us at:

CVWon.com

Sofitel Downtown, 1601-1607 Sheikh Zayed Road, Dubai, United Arab Emirates

E-mail: privacy@cvwon.com