Overview
MakeCV ("we", "us", "our") operates the MakeCV platform — an AI-powered resume builder at makecv.online. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
By using MakeCV, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Privacy Policy.
We are committed to GDPR compliance. If you are located in the European Economic Area (EEA), you have specific rights regarding your personal information which are detailed in the Your Rights section.
Information We Collect
We collect several types of information for various purposes to provide and improve our service to you.
Information you provide directly
- Account data: Name, email address, and password when you register.
- Profile & CV data: Work history, education, skills, contact details, and any other information you add to your resume.
- Uploaded documents: PDF or DOCX files you upload for optimization.
- Payment information: Processed securely via Stripe — we never store raw card numbers.
- Communications: Messages you send us via email or our support channels.
Information collected automatically
- Usage data: Pages visited, features used, time spent, and button clicks.
- Device data: Browser type, operating system, IP address, and device identifiers.
- Log data: Error logs, performance metrics, and access timestamps.
- Cookies & tracking: Session cookies, analytics cookies, and preference cookies. See our Cookie Policy.
How We Use Your Data
We use the data we collect to:
- Provide, maintain, and improve our resume building and ATS optimization services
- Process AI analysis of your CV content using large language models to generate suggestions
- Personalize your experience and remember your preferences
- Send transactional emails (account confirmation, password resets, CV download links)
- Send product updates and promotional offers (you can opt out at any time)
- Monitor platform performance and diagnose technical issues
- Comply with legal obligations and enforce our Terms of Service
- Detect, prevent, and respond to fraud or security threats
AI Processing: When you use AI features, your CV content is sent to our AI provider (OpenAI) for processing. We have a Data Processing Agreement with them ensuring your data is not used to train their models. Content is processed transiently and not stored by the AI provider.
Data Sharing
We do not sell your personal information. We may share data with trusted third parties only under these circumstances:
- Service providers: Companies that help us operate our platform (Vercel for hosting, Stripe for payments, OpenAI for AI features, Resend for email delivery, PostHog for analytics)
- Business transfers: If MakeCV is involved in a merger or acquisition, your data may be transferred as part of that transaction
- Legal requirements: When required by law, subpoena, or to protect the rights and safety of MakeCV and its users
- With your consent: In any other cases where you have explicitly given us permission
All third-party service providers are contractually obligated to keep your information confidential and use it only for the purposes we specify.
Data Security
We implement industry-standard security measures to protect your personal information:
- All data transmitted between your browser and our servers is encrypted via HTTPS/TLS
- Passwords are hashed using bcrypt with unique salts — we never store plaintext passwords
- Database access is restricted to authorized personnel only
- Your CV files are stored in encrypted cloud storage with access control policies
- We conduct regular security reviews and vulnerability assessments
- Two-factor authentication is available for your account
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. Please notify us immediately at security@makecv.online if you suspect any security breach.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Correct any inaccurate or incomplete information
Right to Erasure
Request deletion of your account and all associated data
Right to Portability
Receive your data in a machine-readable format (JSON/CSV)
Right to Object
Opt out of marketing emails and certain data processing
Right to Restrict
Limit how we process your personal data
To exercise any of these rights, contact us at privacy@makecv.online. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
Data Retention
We retain your data for as long as your account is active or as needed to provide services:
- Account data: Retained until you delete your account
- CV content: Stored until you delete it or your account
- Usage logs: Anonymized after 90 days, deleted after 1 year
- Payment records: Retained for 7 years as required by financial regulations
- Support tickets: Retained for 2 years after resolution
When you delete your account, we permanently delete your personal data within 30 days, except where retention is required by law.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please reach out:
We will respond to all privacy-related inquiries within 30 business days.
Related Policies