Legal
Privacy Policy
Ailevare ("we") provides an online service to analyse and improve CVs with AI. This policy explains what personal data we process, why, and your rights under the GDPR.
1. Controller
The controller of your personal data is Ailevare. Contact: no-reply@ailevare.com.
If you need a formal postal address or company registration details for contracts or DPA requests, contact us at the email above and we will provide them.
2. Data we process
Account data: email, name, authentication identifiers (including Google OAuth if you use it), and plan/payment status.
CV content you upload or create: structured CV text, uploaded PDF files, edits, suggestions, and analysis scores.
Technical data: session cookies, security tokens, approximate usage logs needed to run and secure the service.
Payment data: handled by Stripe. We do not store full card numbers; we store Stripe customer/subscription references and purchase status.
3. Purposes and legal bases
Provide the service (account, CV storage, analysis, editor, PDF export) — contract performance (Art. 6(1)(b) GDPR).
Process payments and invoices via Stripe — contract performance and legal obligations.
Improve security (CAPTCHA/Turnstile, abuse prevention) — legitimate interest (Art. 6(1)(f)).
Optional analytics/marketing cookies only with consent via Cookiebot where applicable — consent (Art. 6(1)(a)).
4. AI processing (OpenAI)
To analyse and improve your CV we send relevant CV text and, when needed, PDF content to OpenAI's API as a processor/sub-processor acting on our instructions.
Do not upload special-category data you do not want processed. You remain responsible for the lawfulness of the CV content you submit.
5. Recipients and transfers
Infrastructure and processors may include Supabase (database/auth/storage), Stripe (payments), OpenAI (AI), Resend (transactional email), Cloudflare Turnstile (bot protection), and Cookiebot (consent).
Some providers may process data outside the EEA under Standard Contractual Clauses or equivalent safeguards.
6. Retention
We keep account and CV data while your account is active and for a reasonable period afterwards to comply with legal obligations or resolve disputes, then delete or anonymise it.
You may request deletion of your account and associated data from settings or by contacting us.
7. Your rights
You may request access, rectification, erasure, restriction, portability, and objection, and withdraw consent where processing is based on consent.
To exercise rights, email no-reply@ailevare.com. You may also lodge a complaint with your local supervisory authority (in Spain: AEPD).
8. Security
We apply technical and organisational measures appropriate to the risk (encrypted transport, access controls, authenticated APIs). No method of transmission is 100% secure.
Guest sessions (product)
You can use Ailevare as a guest (anonymous browser session) to analyze or create a CV without registering. Each guest is independent: computer and phone are different sessions and do not share payment, CVs, or downloads. The session is temporary and device-bound. When you create an account or link email/password on the same device, we associate that session's progress with your user. This note describes product behaviour and does not replace definitive legal text.