Privacy policy

1. Data controller

Identity: Jaime Garfia Aragón

Address: C/ Frank Capra 8

Email: privacy@cvora.net

Tax ID: 77672488Q

2. Data we collect

Registration data: full name, email address, encrypted password, preferred language, and country.

Profile data: credits purchased and used.

Uploaded documents: resumes in PDF or DOCX format.

Job postings: stored job descriptions or PDFs.

Usage data: access dates, pages viewed, interactions.

Billing data: processed securely by Stripe (we do not store card details).

Cookies: session identifiers and language preferences.

3. Purpose of processing

Provide the AI CV tailoring service.

Manage authentication and user accounts.

Process credit package payments.

Analyse compatibility between CVs and job postings.

Generate ATS-optimised CVs.

Send essential service communications.

Improve the product through aggregated analytics.

Comply with legal and tax obligations.

4. Legal basis

Contract performance: necessary to deliver the requested service.

Consent: cookies and optional communications.

Legitimate interest: usage analytics to improve the service.

Legal obligation: bookkeeping and tax compliance.

5. Data recipients

Hosting providers located in the EU or with adequate safeguards.

Stripe, Inc. for payment processing.

Email and analytics providers under data processing agreements.

Public authorities when required by law.

6. International transfers

International transfers occur only when suppliers are located outside the EU.

In those cases we rely on standard contractual clauses or equivalent safeguards.

7. Your rights

Right of access, rectification, erasure, restriction, portability, and objection.

You can exercise these rights from the settings page or by emailing privacy@cvora.net.

You may lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Security

TLS encryption for all communications.

Encrypted passwords using bcrypt.

Restricted administrative access.

Regular security reviews and backups.

9. Minors

The service is intended for users aged 16 or older.

We do not knowingly process data from minors. Please contact us if you believe a minor has provided data.

10. Changes

We may update this policy to reflect legal or operational changes.

We will notify you of any significant updates via email.

11. Contact

Email: privacy@cvora.net

Address: C/ Frank Capra 8

12. Location Data

We collect your approximate location (country) based on your IP address during registration to:

Provide regional pricing and relevant currency.

Prevent fraud and abuse.

Comply with local tax regulations.

We do not track your precise realtime location.