Privacy Policy

Effective date: January 20, 2026

This Privacy Policy explains how Remedy CV ("Remedy", "we", "us", or "our") collects, uses, and shares personal data when you use our website and services (the "Service"). Remedy CV is intended for users in the European Union and European Economic Area (EU/EEA) and follows the requirements of the General Data Protection Regulation (GDPR).

1. What we collect

Information you provide

• Contact details (email address).
• CV/resume content and files you upload.
• Job descriptions or job links you provide.
• Support requests and communications.
• If you create an account in the future: login credentials and profile information.

Information collected automatically

• Usage data (pages viewed, actions taken, timestamps).
• Device and technical data (browser type, device identifiers, IP address).
• Cookies and similar technologies (see Section 8).

Payment information

Payments are processed by Stripe. We do not store full card details. Stripe may collect your payment details and other information according to its own privacy policy.

2. Why we use your data (purposes)

• Provide the Service, including CV analysis and report delivery.
• Process payments and send transaction confirmations.
• Communicate with you about your purchase or support requests.
• Improve and secure the Service, including error monitoring and fraud prevention.
• Comply with legal obligations (tax, accounting, and compliance).

3. Legal bases for processing (GDPR)

• Contract: to provide the Service you request.
• Legitimate interests: to secure, improve, and measure the Service.
• Consent: for non-essential cookies and marketing communications (where required).
• Legal obligation: to meet legal and regulatory requirements.

4. How we share your data

We share data with trusted service providers who process data on our behalf. These providers are bound by contractual obligations and may only use the data to provide their services.

• Payment processing: Stripe.
• Email delivery: Resend.
• AI processing: Anthropic (CV analysis and related processing).
• Analytics: Google Analytics (usage and conversion analytics), ContentSquare (user experience analytics).
• Error monitoring: Sentry (debugging and reliability).
• Hosting and infrastructure: Koyeb (cloud hosting).

5. International data transfers

Some of our service providers may process data outside the EU/EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) to protect your data.

6. Data retention

• Uploaded CV/resume files and related processing data (including the email address tied to the session) are stored in ephemeral storage for up to 24 hours and then permanently deleted.
• Deleted data cannot be recovered. We do not back up this ephemeral storage.
• Payment and transaction records are retained as required by law.
• Support communications are retained as needed to resolve issues and meet legal obligations.

We keep personal data only as long as necessary for the purposes described in this policy or as required by law.

7. Your rights under GDPR

If you are located in the EU/EEA, you have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Delete your data in certain circumstances.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (when processing is based on consent).
• Lodge a complaint with your local data protection authority.

To exercise your rights, contact us at contact@remedy.cv.

8. Cookies and analytics

We use cookies and similar technologies for essential site functionality and to understand how users interact with the Service. Where required by law, we will request consent before setting non-essential cookies (such as analytics cookies). You can also control cookies through your browser settings.

9. Automated processing

We use automated tools, including AI models, to analyze your CV and job description and generate recommendations. This processing does not produce legal or similarly significant effects for you. You can contact us if you have questions about this processing.

10. Security

We use reasonable administrative, technical, and organizational measures to protect your data. No system is 100% secure, and we cannot guarantee absolute security.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the effective date and, where appropriate, provide additional notice.

13. Contact

If you have questions about this policy or our privacy practices, contact us at contact@remedy.cv.