CV Creator

Privacy Policy

Last updated: August 2026

1. Data Controller

The data controller is Paul Abensour, sole trader (auto-entrepreneur), registered under SIREN 851579847, located at 4 Mail des Catalpas, 78180 Montigny-le-Bretonneux, France. Contact: paulabnsr@gmail.com.

2. Data We Collect

CV Creator is designed with privacy in mind. Here is what data is processed:

  • CV data: all information you enter in the editor (name, work experience, education, skills, etc.) is stored exclusively in your browser session (sessionStorage). It is never transmitted to our servers or stored on them.
  • Payment data: when you make a payment, your payment details (card number, etc.) are processed directly and exclusively by Stripe. We never see or store your payment card data. Your email address is required at payment time and sent to Stripe so it can deliver the payment receipt containing your signed access-recovery reference.
  • Access recovery: your paid access is stored in a signed cookie in your browser. To restore it elsewhere you enter the signed reference included in your Stripe receipt or PDF invoice. We verify its signature and re-check the payment directly with Stripe. No account is created for this.
  • Contact form: if you send us a message via the contact form, your name, email address, and message content are transmitted by email to our address and are not stored in a database.

3. Legal Basis for Processing

  • Payment processing: performance of a contract (Article 6(1)(b) GDPR).
  • Access management and recovery: performance of a contract (Article 6(1)(b) GDPR).
  • Contact form: legitimate interest and/or consent (Article 6(1)(f) GDPR).

4. Data Processors (Sub-processors)

  • Stripe, Inc. — payment processing and delivery of the payment receipt and recovery reference. Their privacy policy is available at stripe.com/privacy.
  • Vercel, Inc. — hosting and infrastructure logs (340 Pine Street Suite 701, San Francisco, CA 94104, USA). Data is processed in accordance with Vercel's data processing agreement.
  • Resend — transactional email delivery, used for the contact form only.

5. Cookies

CV Creator uses only strictly necessary technologies for payments, security, and browser session storage. No advertising, tracking, or remarketing cookies are used. Stripe may set cookies strictly required to process your payment and prevent fraud.

6. Data Retention

Since CV data is stored in your browser only, it is retained for as long as you keep it there and is deleted when you clear your browser data. Payment transaction records, the payment email and the recovery reference are retained by Stripe in accordance with their policies and applicable law. Contact messages are kept only as long as necessary to respond to your request.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object

To exercise these rights, contact us at paulabnsr@gmail.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you by updating the "Last updated" date at the top of this page.