Privacy Policy
CvLaunch ("we", "the platform") provides AI-powered resume building and ATS (Applicant Tracking System) analysis. This policy explains which personal data we process when you use our service, why we process it, and your rights under the EU GDPR, UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and Turkey's Personal Data Protection Law (KVKK No. 6698).
1. Data Controller
The party responsible for processing your data: Emirhan Torun, Pendik, İstanbul, Türkiye. Contact: support@cv-launch.com.
2. What Data We Collect
- Account data: Your email address and password (never stored in plain text, kept as an irreversible PBKDF2 hash).
- Resume content: All information in the resumes you create or upload, name, contact details, work experience, education, skills, photo, etc.
- Application / job-tracking data: Job listings you add to your tracking board and their application statuses.
- Payment data: Payments are processed by Paddle. We never see or store your card details; we keep only records such as the transaction ID, plan and amount.
- Usage data: Monthly AI usage counters, session cookies and technical logs (for debugging/security).
3. Why and On What Legal Basis We Process Data
- To provide the service (resume building, PDF generation, analysis): performance of a contract.
- To keep your account secure, email verification and password reset: legitimate interest / legal obligation.
- Payment and billing: performance of a contract / legal obligation.
- To improve the service and prevent abuse: legitimate interest.
4. Sharing Data with AI (Important)
When you use features such as resume analysis, "AI Polish", cover-letter generation and quality/career suggestions, the relevant resume text is sent to Google's Gemini AI service for processing. This happens only for features you actively trigger. Unless you use these features, your resume content is not sent to the AI.
5. Third-Party Service Providers (Sub-processors)
| Service | Purpose | Data Shared |
|---|---|---|
| Google Gemini | AI analysis/generation | Resume text (only in the relevant feature) |
| Resend | Transactional email (verification, password reset) | Email address |
| Paddle | Payment processing | Payment/billing data |
| Adzuna / Jooble | Job listing search | Search query (role, location) |
Some of these providers may be located outside your country (e.g. the US/EU); your data may therefore be transferred internationally, where applicable under appropriate safeguards (such as Standard Contractual Clauses). Each provider is subject to its own privacy and security standards.
6. Cookies
We use strictly necessary cookies for session management, security (CSRF) and storing preferences. For details, see our Cookie Policy.
7. Data Retention
Your data is retained while your account is active. When you delete your account, your resumes, job listings, applications and associated personal data are permanently deleted. Because payments are handled by our payment provider (Paddle), statutory invoice/accounting records may be retained by Paddle under its own obligations.
8. Your Rights (GDPR / UK GDPR / CCPA / KVKK)
- Access your data and export a copy (data portability).
- Request correction of inaccurate data (via the account/resume editor).
- Delete your account and data ("right to erasure" / "right to be forgotten").
- Object to processing and lodge a complaint with a supervisory authority.
- California residents (CCPA/CPRA): you have the right to know, delete, and opt out of the "sale"/"sharing" of personal information. We do not sell your personal information.
You can exercise these rights via the "Download My Data" and "Delete My Account" options in your account settings, or by contacting support@cv-launch.com.
9. Security
Passwords are hashed with PBKDF2, traffic is encrypted over HTTPS, and session/CSRF protection and security headers are applied. Still, no transmission over the internet is ever 100% secure.
10. Changes
We may update this policy from time to time. We will notify you of material changes. The current version is always available on this page.
