Privacy Policy

1. Who We Are

RefactorCV is operated from the European Union. We process your personal data in accordance with the General Data Protection Regulation (GDPR). Our goal is to help you tailor your resume to job descriptions using AI — while keeping your data safe and under your control.

2. Data We Collect

We collect only what is necessary to provide our service:

• Account information (email, name) from your identity provider
• Resumes and cover letters you upload or create
• Job descriptions you provide for tailoring
• Usage data (pages visited, features used) for service improvement

3. How We Use Your Data

Your data is used exclusively to provide the resume tailoring service. Resumes and job descriptions are sent to Anthropic's Claude API for AI processing. Anthropic does not use your data to train their models. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Security

All data is stored on EU-based servers (Hetzner, Germany). Data is encrypted in transit (TLS 1.3) and at rest. Each tenant's data is isolated using PostgreSQL Row-Level Security. We perform regular security audits and maintain strict access controls.

5. Your Rights

Under GDPR, you have the right to:

• Access and export all your data at any time
• Request correction of inaccurate data
• Request permanent deletion of your account and all associated data

6. Cookies

We use essential cookies required for authentication and session management. We do not use tracking cookies or third-party advertising cookies. You can manage your cookie preferences at any time through the cookie consent banner.

7. Contact

For privacy-related inquiries, data access requests, or to exercise any of your GDPR rights, please contact us at privacy@refactorcv.com.