Back to home

Privacy Policy

Last updated: January 2026

1. Who We Are

RefactorCV is operated from the European Union. We process your personal data in accordance with the General Data Protection Regulation (GDPR). Our goal is to help you tailor your resume to job descriptions using AI — while keeping your data safe and under your control.

2. Data We Collect

We collect only what is necessary to provide our service:

  • Account information (email, name) from your identity provider
  • Resumes and cover letters you upload or create
  • Job descriptions you provide for tailoring
  • Usage data (pages visited, features used) for service improvement

3. How We Use Your Data

Your data is used exclusively to provide the resume tailoring service. Resumes and job descriptions are sent to a third-party AI provider — Google, through the Gemini API — for processing. Google does not use this data to train its models and processes it under its Data Processing Addendum. Processing may occur outside the EEA. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Security

All data is stored on EU-based servers (Hetzner, Germany). Data is encrypted in transit (TLS 1.3) and at rest. Each tenant's data is isolated using PostgreSQL Row-Level Security. We perform regular security audits and maintain strict access controls.

5. Your Rights

Under GDPR, you have the right to:

  • Access and export all your data at any time
  • Request correction of inaccurate data
  • Request permanent deletion of your account and all associated data

6. Cookies

We use essential cookies for authentication and session management. We also use Google Tag Manager, Google Analytics and Google Ads cookies for analytics and ad measurement — in the EEA, the UK and Switzerland those cookies aren't set until you accept them in the cookie banner. To change your choice later, clear this site's cookies and site data in your browser; the banner will appear again on your next visit.

7. Contact

For privacy-related inquiries, data access requests, or to exercise any of your GDPR rights, please contact us at privacy@refactorcv.com.