Introduction

At CVTone AI ("we", "us", "our"), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our CV builder platform at cvtone.com.

Information We Collect

Account information: email address, full name, and authentication data when you register.
CV content: personal details, work experience, education, skills, and other information you enter into your CV.
Usage data: pages visited, features used, browser type, and device information for analytics and service improvement.
Payment information: Paddle is our merchant of record and handles payment processing on our behalf. We share your email address, your name, and an internal account reference with Paddle so that it can identify your purchase. You enter your card and billing details directly into Paddle’s checkout, so they never reach our servers, and we do not store credit card numbers. Paddle collects your billing address and country in order to charge the correct amount and tax, and returns to us only the transaction, customer, and subscription identifiers, the amount and currency, and the plan or Points pack you bought.

How We Use Your Information

CV generation and management: to create, store, and export your CVs.
Account management: to maintain your account, authenticate access, and manage subscriptions.
Service improvement: to analyze usage patterns and improve our platform features.
Communication: to send service-related notifications and respond to support requests.
AI features: to provide AI-powered CV writing suggestions (paid plans only). Your data is not used to train AI models.

Data Storage and Security

Your data is stored securely on Supabase (cloud infrastructure) and served through Vercel. Our servers are located in secure data centers. We implement industry-standard security measures including encryption in transit (TLS) and at rest, row-level security policies, and secure authentication protocols.

Cookies and Analytics

Essential cookies: required for sign-in, session management, and security. The site cannot function without them.
Analytics cookies: we use Google Analytics 4 (Google Ireland Limited) to measure page views and understand how the site is used. It sets the _ga and _ga_* cookies and processes your IP address and device information.
Analytics load on every page and are not conditional on the cookie notice. To opt out, use Google’s official browser add-on at https://tools.google.com/dlpage/gaoptout, or block analytics cookies in your browser settings.
We do not use advertising or cross-site tracking cookies, and we do not sell your data.

Saudi Personal Data Protection Law (PDPL)

We comply with the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL). As a data controller, we process your personal data lawfully and transparently. We only collect data necessary for providing our services, and we implement appropriate technical and organizational measures to protect your data.

GDPR Compliance

For users in the European Economic Area, we align our data practices with the General Data Protection Regulation (GDPR). We process data based on your consent and our legitimate interest in providing the service.

Your Rights

Access: request a copy of the personal data we hold about you.
Correction: request correction of inaccurate or incomplete data.
Deletion: request deletion of your personal data. You can delete your account and all associated data from the Account settings page.
Data portability: export your CV data in PDF format at any time.
Withdraw consent: you may withdraw your consent to data processing at any time by deleting your account.

Privacy Inquiries

For privacy-related questions or to exercise your rights, contact us at support@notify.cvtone.com.