Privacy Policy

1. Controller

The controller responsible for data processing is the operator named in our Legal Notice (Impressum). Contact details are listed there.

2. What data we process

Account data: email address, and name/profile picture if you sign in with Google.

Content you provide: CV text or uploaded CV files, job descriptions, job posting links, tailored CV versions, AI Coach messages and your application tracker entries.

Technical data: IP address, browser type and access times, processed automatically by our hosting provider to deliver and secure the service.

3. Purposes and legal basis

We process your data to provide the CV tailoring, AI Coach and application tracking features you request (Art. 6(1)(b) GDPR, performance of a contract).

Technical logs are processed to keep the service secure and stable (Art. 6(1)(f) GDPR, legitimate interest).

4. AI processing

To tailor your CV, your CV text and the job description are sent to AI model providers (such as Google and OpenAI) through a secure AI gateway. This happens only to generate your result. Your content is not used by us to train AI models, and we do not sell your data.

5. Recipients and processors

Hosting, database and authentication: Lovable Cloud and its infrastructure providers.

AI processing: AI model providers via the Lovable AI gateway.

Google sign-in (optional): Google Ireland Ltd.

Some providers may process data outside the EU. Where this happens, transfers are protected by EU Standard Contractual Clauses or an adequacy decision (e.g. EU-US Data Privacy Framework).

6. Storage in your browser

We use only technically necessary browser storage (local/session storage) to keep you signed in, remember your language and preserve your current draft. We do not use advertising or tracking cookies.

7. Retention

Without an account, your content is not stored on our servers beyond processing; drafts stay only in your browser. With an account, your data is kept until you delete it or delete your account. You can delete your account and all associated data at any time from your account page.

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21). To exercise these rights, contact us using the details in the Legal Notice.

You also have the right to lodge a complaint with a data protection supervisory authority.

9. Changes

We may update this policy when our service changes. The current version is always available on this page.