CV Creator

Privacy Policy

Last updated: March 2026

1. Data Controller

The data controller is Paul Abensour, sole trader (auto-entrepreneur), registered under SIREN 851579847, located at 4 Mail des Catalpas, 78180 Montigny-le-Bretonneux, France. Contact: paulabnsr@gmail.com.

2. Data We Collect

CV Creator is designed with privacy in mind. Here is what data is processed:

  • CV data: all information you enter in the editor (name, work experience, education, skills, etc.) is stored exclusively in your browser (localStorage). It is never transmitted to our servers or stored on them.
  • Payment data: when you make a payment of €2, your payment details (card number, etc.) are processed directly and exclusively by Stripe. We never see or store your payment card data.
  • Email address: if you choose to receive your CV and invoice by email, your email address is used solely for that delivery and is not stored or reused.
  • Contact form: if you send us a message via the contact form, your name, email address, and message content are transmitted by email to our address and are not stored in a database.

3. Legal Basis for Processing

  • Payment processing: performance of a contract (Article 6(1)(b) GDPR).
  • Email delivery of CV/invoice: performance of a contract.
  • Contact form: legitimate interest and/or consent.

4. Data Processors (Sub-processors)

  • Stripe, Inc. — payment processing. Their privacy policy is available at stripe.com/privacy.
  • Vercel, Inc. — web hosting and analytics (340 Pine Street Suite 701, San Francisco, CA 94104, USA). Data is processed in accordance with Vercel's data processing agreement. Vercel Analytics collects anonymous, aggregated traffic data (page views, referrers, country) with no cookies and no personally identifiable information. See Vercel's Analytics privacy documentation.
  • Resend — transactional email delivery. Used only when you request email delivery of your CV or use the contact form.

5. Cookies & Analytics

CV Creator uses only strictly necessary technical cookies (session management, Stripe security). No marketing or advertising cookies are used.

We use Vercel Analytics to understand how visitors use the site. Vercel Analytics is cookieless — it does not place any tracking cookie on your device, does not collect personally identifiable information, and only processes anonymised, aggregated data (page views, referrer, country, device type). This processing is based on our legitimate interest in improving the service (Article 6(1)(f) GDPR).

6. Data Retention

Since CV data is stored in your browser only, it is retained for as long as you keep it there and is deleted when you clear your browser data. Payment transaction records are retained by Stripe in accordance with their policies and applicable law. Contact messages are kept only as long as necessary to respond to your request.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object

To exercise these rights, contact us at paulabnsr@gmail.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you by updating the "Last updated" date at the top of this page.