Privacy Policy | CVSwiss

1. Who is responsible

The operator of CVSwiss named in the imprint is responsible for processing your personal data. For any question about your data, write to hello@cvswiss.ch.

Imprint

2. What we process

We process the data you give us and the data that arises when you use the service:

Account: e-mail address, sign-in method, language.
Your documents: everything you enter or upload for a CV or letter. A CV usually contains your name, contact details, career and education, and may contain a photo, date of birth, nationality and work permit.
Purchases: product, amount, date and payment status.
Usage: pages visited, actions in the builder, device and browser, approximate location derived from the IP address.
Messages you send us, including feedback.

3. Why we process it

To provide the service you asked for and to fulfil our contract with you; to take payment and keep the records the law requires; to keep the service secure and prevent abuse; to understand how the site is used and to measure our advertising; and to send you e-mail.

Marketing e-mail is sent only if you agreed, or if you are a customer and have not refused. You can refuse at any time through the link in every such e-mail or in your account settings. Receipts, confirmations and account messages are always sent.

4. Artificial intelligence

When you ask us to write, improve, translate or check a document, its text is sent to an AI provider, which returns the result to us. When you upload a CV file, the file is sent to an AI provider to be read. This is necessary to provide these functions. You decide what you put into a document.

5. Who receives your data

We do not sell your data. We use the following service providers, who process data on our behalf:

Supabase: database, sign-in and server functions. Your account and your documents are stored in Zurich, Switzerland.
Netlify: delivers the website. United States and worldwide network.
Stripe: payments, invoices and the subscription. Ireland and United States. We never see or store your full card number.
OpenAI: writes and improves CV and letter text, runs the ATS check, the job search and the reference-letter check, and is the backup for reading uploaded CV files and translating CVs. United States.
Google: the Gemini AI reads CV files you upload and translates CVs; Google Analytics and Google Ads measure visits and advertising; Google also delivers a typeface used on the site. United States and worldwide.
Microsoft Clarity: recordings of how pages are used, with all page text masked. United States and worldwide.
Resend: sends our e-mails. United States.
Cloudflare: protects sign-in against automated abuse. United States and worldwide.
Telegram: internal notifications to the operator, which can contain your e-mail address and the text of feedback you send us.

6. Transfers abroad

Some of these providers process data outside Switzerland and the European Economic Area, in particular in the United States. They commit to data protection through their data processing terms, including standard contractual clauses or certification under the Data Privacy Framework.

7. Cookies, analytics and recordings

Storage that the site needs in order to work, such as your sign-in and your language, is always used. Analytics, advertising measurement and session recordings are used as follows: for visitors in Switzerland unless they refuse, and for all other visitors only after they accept. You can change your choice at any time under "Cookie settings" at the bottom of every page.

In session recordings all page text is masked, including everything you type.

Independently of this choice, we keep our own usage statistics on our own servers, to run and improve the service. For visitors who have not accepted, nothing is stored on the device for this purpose.

8. How long we keep data

We keep your account and documents until you ask us to delete them. After a deletion request we delete your account and its content within 30 days. Records we are required by law to keep, such as payment records, are kept for the period the law requires, which is 10 years.

9. Your rights

You may ask us what data we hold about you, have it corrected or deleted, receive a copy, object to a use, and withdraw a consent. Write to hello@cvswiss.ch and we answer within 30 days. Deleting your account is requested in your account settings. You may also complain to the data protection authority: in Switzerland the Federal Data Protection and Information Commissioner, in the EU the authority of your country.

10. Changes

We update this policy when the service changes. The date at the top shows the current version.