CV Creator

Privacy Policy

Last updated: May 2026

1. Data Controller

The data controller is Paul Abensour, sole trader (auto-entrepreneur), registered under SIREN 851579847, located at 4 Mail des Catalpas, 78180 Montigny-le-Bretonneux, France. Contact: paulabnsr@gmail.com.

2. Data We Collect

CV Creator is designed with privacy in mind. Here is what data is processed:

  • CV data: all information you enter in the editor (name, work experience, education, skills, etc.) is stored exclusively in your browser session (sessionStorage). It is never transmitted to our servers or stored on them.
  • Payment data: when you make a payment of €2, your payment details (card number, etc.) are processed directly and exclusively by Stripe. We never see or store your payment card data. Stripe may collect your email address as part of the payment flow in accordance with their own privacy policy.
  • Contact form: if you send us a message via the contact form, your name, email address, and message content are transmitted by email to our address and are not stored in a database.

3. Legal Basis for Processing

  • Payment processing: performance of a contract (Article 6(1)(b) GDPR).
  • Contact form: legitimate interest and/or consent (Article 6(1)(f) GDPR).

4. Data Processors (Sub-processors)

  • Stripe, Inc. — payment processing. Their privacy policy is available at stripe.com/privacy.
  • Vercel, Inc. — hosting and infrastructure logs (340 Pine Street Suite 701, San Francisco, CA 94104, USA). Data is processed in accordance with Vercel's data processing agreement.
  • Resend — transactional email delivery. Used only when you contact us via the contact form.

5. Cookies

CV Creator uses only strictly necessary technologies for payments, security, and browser session storage. No advertising, tracking, or remarketing cookies are used. Stripe may set cookies strictly required to process your payment and prevent fraud.

6. Data Retention

Since CV data is stored in your browser only, it is retained for as long as you keep it there and is deleted when you clear your browser data. Payment transaction records are retained by Stripe in accordance with their policies and applicable law. Contact messages are kept only as long as necessary to respond to your request.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object

To exercise these rights, contact us at paulabnsr@gmail.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you by updating the "Last updated" date at the top of this page.