Privacy policy

CVKraken operates CVKraken and is the controller of the personal data described here. Questions go to [email protected].

• Your career profile — what you type into it: contact details, jobs, education, skills and the rest.
• Your tailored CVs — the company and role you named, the job posting you pasted, any notes, and the CV and cover letter written for it.
• Your account — the email address and name EmbedAuth tells us when you sign in, your plan, and whether you answered the newsletter question.
• Usage counters — how many CVs were tailored today, keyed by your account or, for a guest, by a keyed hash of the day and your IP address (never the address itself).

When you ask for a tailored CV, your career profile, the company, the role, the job posting and your notes are sent to OpenRouter (nemotron-3-super-120b-a12b) to write it. Nothing else is sent, and nothing is sent until you ask.

Free AI providers may keep prompts under their own terms. Don't put anything in your profile you would not put on a CV. We check every reply against your own profile and drop anything it cannot back — but always read a tailored CV before you send it.

A guest's profile and CVs are tied to a cookie on that browser and deleted 7 days after their last change. Creating an account and choosing to save moves them into it.

• EmbedAuth — signs you in. Your password never reaches us.
• PayBroadcast and Stripe — handle Premium payments. We never see or store card details.
• SubscriBeam — sends the newsletter, only if you subscribe; it asks you to confirm your address first.
• The AI provider — as described above.
• Google — shows the ads on our home page and these policies, if you agree to them (see Cookies).

These keep the site working, so they are set without asking:

• Session — keeps you signed in. Strictly necessary.
• Guest workspace — ties a guest's work to their browser for 7 days. Strictly necessary.
• Member hint — tells the home page to send you to your dashboard. Contains only "1".

Your light or dark theme choice is kept in your browser's local storage.

Advertising. Our home page and these policy pages show ads from Google AdSense. Pages with your profile, your CVs or your account never do, and never load Google's ad code. Google's ad code sets cookies and reads your device's identifiers to show, measure and personalise those ads; how Google uses this information.

We ask first. Google's code is not loaded at all until you choose Accept all, or turn Advertising on, in our cookie window; Reject all keeps it out, and CVKraken works the same either way. Your answer is kept for six months in a cookie of ours, cvk_consent, which holds only that answer. Change or withdraw it at any time from Cookie settings, at the bottom of every page: withdrawing deletes the cookies Google set on our site. You can also turn off personalised ads in Google's ad settings.

• Guest work: 7 days after its last change.
• Account work: until you delete it, or your account.
• A tailoring interrupted mid-way is marked failed after 15 minutes.
• Usage counters: 60 days. Raw billing notifications: 90 days.

On your Account page you can download everything we hold about you as one file, and delete your profile and CVs at once. For anything else — correction, objection, a complaint — write to [email protected]. You may also complain to your data protection authority.