Back to home

Privacy Policy

Last updated: January 2026

1. Who We Are

RefactorCV is operated from the European Union. We process your personal data in accordance with the General Data Protection Regulation (GDPR). Our goal is to help you tailor your resume to job descriptions using AI — while keeping your data safe and under your control.

2. Data We Collect

We collect only what is necessary to provide our service:

  • Account information (email, name) from your identity provider
  • Resumes and cover letters you upload or create
  • Job descriptions you provide for tailoring
  • Usage data (pages visited, features used) for service improvement

3. How We Use Your Data

Your data is used exclusively to provide the resume tailoring service. Resumes and job descriptions are sent to a third-party AI provider for processing, depending on your plan: free and anonymous accounts use Google's Gemini API, and paid accounts use Anthropic's Claude API. Google does not use this data to train its models and processes it under its Data Processing Addendum; Anthropic likewise does not use this data to train its models. Processing may occur outside the EEA. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Security

All data is stored on EU-based servers (Hetzner, Germany). Data is encrypted in transit (TLS 1.3) and at rest. Each tenant's data is isolated using PostgreSQL Row-Level Security. We perform regular security audits and maintain strict access controls.

5. Your Rights

Under GDPR, you have the right to:

  • Access and export all your data at any time
  • Request correction of inaccurate data
  • Request permanent deletion of your account and all associated data

6. Cookies

We use essential cookies required for authentication and session management. We do not use tracking cookies or third-party advertising cookies. You can manage your cookie preferences at any time through the cookie consent banner.

7. Contact

For privacy-related inquiries, data access requests, or to exercise any of your GDPR rights, please contact us at privacy@refactorcv.com.