Privacy Policy

1. Controller

The controller of your personal data is Ailevare. Contact: support@ailevare.com.

If you need a formal postal address or company registration details for contracts or DPA requests, contact us at the email above and we will provide them.

2. Data we process

Account data: email, name, authentication identifiers (including Google OAuth if you use it), and plan/payment status.

CV content you upload or create: structured CV text, uploaded PDF files, edits, suggestions, and analysis scores.

Technical data: session cookies, security tokens, approximate usage logs needed to run and secure the service.

Payment data: handled by Stripe. We do not store full card numbers; we store Stripe customer/subscription references and purchase status.

3. Purposes and legal bases

Provide the service (account, CV storage, analysis, editor, PDF export) — contract performance (Art. 6(1)(b) GDPR).

Process payments and invoices via Stripe — contract performance and legal obligations.

Improve security (CAPTCHA/Turnstile, abuse prevention) — legitimate interest (Art. 6(1)(f)).

Optional analytics/marketing cookies only with consent via Cookiebot where applicable — consent (Art. 6(1)(a)).

4. AI processing (OpenAI)

To analyse and improve your CV we send relevant CV text and, when needed, PDF content to OpenAI's API as a processor/sub-processor acting on our instructions.

Do not upload special-category data you do not want processed. You remain responsible for the lawfulness of the CV content you submit.

5. Recipients and transfers

Infrastructure and processors may include Supabase (database/auth/storage), Stripe (payments), OpenAI (AI), Resend (transactional email), Cloudflare Turnstile (bot protection), and Cookiebot (consent).

Some providers may process data outside the EEA under Standard Contractual Clauses or equivalent safeguards.

6. Retention

We keep account and CV data while your account is active and for a reasonable period afterwards to comply with legal obligations or resolve disputes, then delete or anonymise it.

You may request deletion of your account and associated data from settings or by contacting us.

7. Your rights

You may request access, rectification, erasure, restriction, portability, and objection, and withdraw consent where processing is based on consent.

To exercise rights, email support@ailevare.com. You may also lodge a complaint with your local supervisory authority (in Spain: AEPD).

8. Security

We apply technical and organisational measures appropriate to the risk (encrypted transport, access controls, authenticated APIs). No method of transmission is 100% secure.