Back to Home

Privacy Policy

Last updated: April 29, 2026

1. Who We Are

CvClimber ("we", "us", "our") operates the AI-powered job-search platform at cvclimber.lol. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our Service.

2. Data We Collect

  • Account data: name, email address, hashed password.
  • CV content: the CV/resume text you upload or paste, plus the job descriptions you analyze against.
  • Generated content: ATS scores, keyword reports, cover letters, voice-interview transcripts.
  • Usage data: pages visited, features used, device and browser information, IP address.
  • Billing data: handled entirely by Lemon Squeezy (our Merchant of Record). We never see or store full payment-card details.

3. How We Use Your Data

  • To provide CV analysis, cover letters, the job tracker, and other features you request.
  • To process payments via Lemon Squeezy.
  • To improve the Service, fix bugs, and prevent abuse.
  • To send transactional emails (receipts, security alerts) and — with your consent — product updates.

4. Legal Basis (GDPR)

We process personal data on the basis of (a) performance of our contract with you, (b) your consent (e.g. marketing emails), (c) our legitimate interests in operating and securing the Service, and (d) compliance with legal obligations.

5. Sub-Processors We Use

  • Supabase — database and authentication hosting.
  • Lemon Squeezy — payments and tax (Merchant of Record).
  • OpenAI / Anthropic — AI model providers used to generate analyses and cover letters. Inputs are sent over TLS and not used to train their models.
  • Vercel — application hosting.
  • Resend / SMTP — transactional email delivery.

6. Data Sharing

We do not sell your personal data. We share it only with the sub-processors listed above to operate the Service, or when required by law.

7. Data Retention

We keep your account and CV data for as long as your account is active. You can delete your account and all associated CV data at any time from your settings. Billing records may be retained for up to 7 years to comply with tax and accounting laws.

8. Your Rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA, etc.) you have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to processing or withdraw consent. Email privacy@cvclimber.lol to exercise these rights.

9. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Passwords are hashed using industry-standard algorithms. Access to production systems is restricted and logged.

10. Cookies

We use strictly-necessary cookies for authentication and session management, and (with your consent) analytics cookies to understand usage. You can control cookies through your browser settings.

11. International Transfers

Our sub-processors may process data outside your country. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

12. Children

The Service is not intended for users under 16. We do not knowingly collect personal data from children.

13. Changes to This Policy

We will post any changes here and update the "Last updated" date. Material changes will be notified by email.

14. Contact

For privacy questions, reach us at privacy@cvclimber.lol or via our contact page.