Privacy Policy
Last updated: January 1, 2026
At CV Creator Hub, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
The data controller responsible for your personal data is:
Filip Kornaus
Address: Filip Kornaus, ul. Komandosów 3/70, 30-334 Kraków, Poland
Email: [email protected]
Account Information
When you create an account, we collect:
- Your name
- Your email address
- Your password (encrypted)
Profile and CV Data
We collect and store the information you provide when creating profiles, CVs, and job applications. This includes personal information, work experience, education, skills, and any other information you choose to include.
Usage Data
We automatically collect certain information when you use our services, including your IP address, browser type, pages visited, time spent on pages, and other diagnostic data. We use Google Analytics to help us understand how users interact with our website.
- To provide, operate, and maintain our services
- To improve, personalize, and expand our services
- To communicate with you, including customer service and updates
- To protect against fraudulent, unauthorized, or illegal activity
- To analyze usage patterns and improve user experience
We process your personal data based on the following legal grounds:
Performance of Contract (Art. 6(1)(b))
Processing is necessary to provide our services to you, including account management, CV creation, and AI optimization features.
Consent (Art. 6(1)(a))
We process analytics data (Google Analytics) based on your explicit consent through our cookie banner.
Legitimate Interests (Art. 6(1)(f))
We process certain data based on our legitimate interest in improving our services, preventing fraud, and ensuring security, while balancing your rights and interests.
Legal Obligation (Art. 6(1)(c))
We may process data to comply with legal obligations, such as tax laws, accounting requirements, or responding to lawful requests from authorities.
We do not sell your personal information. We may share your information in the following circumstances:
Service Providers
We may share your information with third-party service providers who perform services on our behalf, including:
- Google Analytics for website analytics
- OpenAI for AI-powered features (CV optimization, job description analysis)
We use cookies and similar tracking technologies to track activity on our website and store certain information. For detailed information about the cookies we use, please see our Cookie Policy.
Under the GDPR and other privacy laws, you have the following rights:
- Right to Access (Art. 15): Request a copy of your personal data
- Right to Rectification (Art. 16): Correct inaccurate personal data
- Right to Erasure (Art. 17): Request deletion of your personal data ('Right to be Forgotten')
- Right to Restriction (Art. 18): Request limitation of processing
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
- Right to Object (Art. 21): Object to processing based on legitimate interests
- Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time for consent-based processing
- Right to Lodge a Complaint (Art. 77): File a complaint with your supervisory authority
Supervisory Authority
If you are not satisfied with how we handle your data or our response to your requests, you have the right to lodge a complaint with your local data protection supervisory authority.
For users in Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych - PUODO). For users in other EU/EEA countries, please contact your national data protection authority.
We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
We may transfer your personal data to countries outside the European Economic Area (EEA), including the United States, where some of our service providers are located.
Transfer Safeguards
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Transfers to countries with adequacy decisions by the European Commission
- Data Processing Agreements with third-party processors ensuring GDPR-level protection
Third Countries
- United States: Google Analytics (Google LLC) and OpenAI (OpenAI, Inc.) - protected by Standard Contractual Clauses
Our AI-powered features provide suggestions and recommendations to help you optimize your CV and job applications. These features do not make automated decisions that have legal or similarly significant effects on you.
You always have full control over whether to accept or reject AI suggestions. Our AI analyzes your data to provide recommendations, but all final decisions about your CV content and job applications remain entirely with you.
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy and to comply with our legal obligations.
Retention Periods
- Active accounts: For the duration of your account plus 30 days after account deletion
- Inactive accounts: Accounts inactive for 3 years may be deleted after notice
- User deletion requests: Processed within 30 days, except where retention is legally required
- Legal compliance: Some data may be retained longer to comply with legal, accounting, or tax obligations
- Analytics data: Google Analytics data is retained for 26 months
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Email: [email protected]