Privacy Policy
Effective: May 15, 2026
This Privacy Policy explains how CV Creator ("we", "us") collects, uses, and protects information when you use the service. We operate under Turkey's KVKK (Law on the Protection of Personal Data, no. 6698) and process European visitors' data in line with the GDPR. By using the service you agree to the practices below.
What we collect
We collect: (1) the email address you sign up with; (2) the CV content you provide (name, contact details, work history, education, skills, optionally a photo and Turkey-specific fields such as military service status); (3) job postings you submit for analysis (URL or pasted text); (4) usage telemetry — which features you use and when, including aggregated token costs. We do not collect payment-card data — those are handled directly by our billing provider.
How we use it
We use your data to operate the service: adapt your CV to a job posting, score it against ATS rules, generate cover letters and enhance photos, and deliver downloads. We use anonymized telemetry to improve the product. The legal bases (KVKK Art. 5 / GDPR Art. 6): performance of the contract you have with us, your explicit consent for sensitive data such as photos, and our legitimate interest in keeping the service secure.
Who we share it with
We share strictly necessary data with subprocessors: Supabase (database + authentication, EU region), Azure OpenAI (CV rewriting and photo enhancement), Anthropic (photo quality assessment), remove.bg (background removal), Lemon Squeezy (billing), Vercel (hosting), and Upstash (rate limiting). Each is bound by their own data-protection terms. We never sell personal data.
Your rights
Under KVKK Art. 11 and GDPR Art. 15–22 you have the right to access, correct, erase, restrict, and export your data, and to object to its processing. You can edit or delete your CVs and adapted versions at any time from the dashboard, and you can permanently delete your account from Account → Danger zone. Deletion is a cascade — all CVs, adapted versions, generated photos, and subscription history are removed.
Contact & data controller
Data controller (KVKK Veri Sorumlusu): reach us at support@aicvcreator.example. For unresolved complaints under KVKK you may also contact the Turkish Data Protection Authority (KVKK Kurumu); under GDPR you may contact your local supervisory authority.