Privacy Policy
Last Updated: January 10, 2026
At CVoria ("we", "us", or "our"), we value your privacy and are committed to protecting your personal data. This policy outlines how we collect, use, and safeguard your information when you use our website and services. If you do not agree with the practices described in this policy, please discontinue the use of our services immediately.
1. Who We Are (Data Controller)
CVoria is a service operated from Sweden. For all privacy-related inquiries, data deletion requests, or to exercise your GDPR rights, please contact us at: Email: support@cvoria.com
2. Information We Collect
We collect information to provide our AI-powered career tools. This includes: A. Information you provide to us: • Account Data: When you register, we collect your email address and a hashed password. If you use our services, we may associate generated content with your user ID. • Career Documents: Files you upload, such as Resumes/CVs (PDF/DOCX) and Cover Letters. • Profile Data: Text you input regarding your LinkedIn profile, job descriptions you paste, and personal career highlights. • Profile Photo: An optional photo you upload to be included in your generated documents. This photo is stored in your local session and optionally saved with your PDF settings. • Audio Data: When you use the Interview Coach feature, we record audio from your microphone to transcribe and analyze your speech patterns, clarity, and content. • Feedback: Information sent when you submit bug reports or feature requests via our feedback tools. B. Information collected automatically: • Technical Data: IP address, browser type, device information, and operating system. • Usage Data: How you interact with our dashboard, which features you use, and time spent on pages. We use Vercel Analytics, a privacy-friendly analytics solution that does not use cookies or track individual users. We do not send account identifiers such as user IDs or session IDs to Vercel Analytics. C. Payment Information: All payments are processed by our Merchant of Record, Paddle. We do not store or process your full credit card number. Paddle provides us with a transaction ID and the status of your subscription to grant you access to Pro features.
3. How We Use Your Information
We use your data solely to provide and improve the CVoria services: • To Provide Services: analyzing your resume, generating cover letters, and scoring interview answers. • To Improve AI Accuracy: We may use anonymized, aggregated data to calibrate our scoring algorithms (e.g., determining what an "80/100" score looks like). • To Authenticate You: Ensuring only you can access your saved documents. • Service Communications: Sending password reset emails, analysis completion notifications, or subscription receipts.
4. Artificial Intelligence (AI) & Data Processing
CVoria uses advanced AI to power features like the Resume Analyzer, Cover Letter Generator, and Interview Coach. Trusted Partners: We transmit specific user content (Resume text, Job Descriptions, Audio transcripts) to third-party AI providers, specifically Google (Gemini/Vertex AI) and OpenAI. No Model Training: We configure our API usage to ensure that your data is NOT used to train the public AI models of our providers. Your data is processed for the sole purpose of generating your specific feedback and is subject to provider retention policies (usually less than 30 days for abuse monitoring). Audio Processing: Audio recordings are transcribed into text for analysis. While we store the recording to allow you to play it back, we do not use your voice data for biometric identification. Automated Decision-Making (GDPR Article 22): CVoria does not make legally binding or significant decisions on your behalf. All feedback, scores, and recommendations generated by our AI are advisory only and are intended as guidance to help you improve your job applications.
5. Third-Party Subprocessors
To run CVoria, we share necessary data with the following third-party providers. We ensure all providers adhere to GDPR standards. Vercel: Hosting, Database (Postgres), File Storage (Blob/KV), Analytics - Location: USA / EU Google (Vertex AI): AI Processing for text and analysis - Location: USA / Global OpenAI: AI Processing fallback - Location: USA Paddle: Payment Processing (Merchant of Record) - Location: UK / Global
6. Legal Basis for Processing (GDPR)
• Contract: To fulfill the service you signed up for (e.g., analyzing the CV you uploaded). • Consent: For optional features (e.g., recording audio for the Interview Coach) and marketing communications. You may withdraw consent at any time. • Legitimate Interest: For fraud prevention, security, and improving the stability of our infrastructure. Marketing Communications: We may send you marketing emails, which include product updates, career tips, feature announcements, and promotional offers. Marketing emails are clearly distinguishable from transactional communications. You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link at the bottom of any such email or by contacting us at support@cvoria.com. Transactional emails (such as password resets, subscription receipts, and account notifications) are not considered marketing and will continue to be sent as necessary for service operation.
7. Data Retention
Files & Analysis: We retain your uploaded CVs, generated cover letters, and analysis reports as long as your account is active so you can access your history. Audio: Interview recordings are retained to allow you to review your performance. You may delete specific sessions at any time. Account Deletion: If you delete your account, all personal data associated with your user ID is permanently removed from our databases within 30 days, except for payment records we are legally required to keep for tax purposes.
8. Your Rights
You have the right to: • Access: Request a copy of the personal data we hold about you. • Rectification: Correct inaccurate data. • Deletion (Right to be Forgotten): Request that we delete your account and all associated data. • Portability: Receive your data in a structured, common format. • Withdraw Consent: Stop using optional features (like Audio recording) at any time. To exercise any of these rights, simply email support@cvoria.com. We will respond within the statutory timeframes.
9. International Transfers
Some of our service providers (e.g., Vercel, Google) are located in the United States. We rely on the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs) to ensure your data remains protected in accordance with European data protection laws when transferred internationally.
10. Cookies
We use only essential cookies required for the core functionality of our service. Essential Cookies: Required for authentication, security, and basic functionality. These cookies are strictly necessary for the service to operate and do not require consent. Disabling them will prevent you from logging into the dashboard. No Tracking Cookies: We do not use any third-party tracking or analytical cookies. Our analytics solution (Vercel Analytics) is privacy-friendly, does not use cookies, and does not receive account identifiers such as user IDs or session IDs from us. Managing Cookies: You can manage cookies through your browser settings. Note that disabling essential cookies will affect your ability to use CVoria.
11. Changes to This Policy
We may update this policy as our services evolve. If we make significant changes, we will notify you via email or a prominent notice on the dashboard.
Questions about this policy? Contact us at support@cvoria.com