Privacy policy
Last updated
Who we are
VirezoCV, [email protected]. Here "we" means the people who run VirezoCV, and "you" means you.
You can reach us at [email protected] about anything on this page.
What we collect
Your account: your name, your email address, your password (stored only as a one-way hash we cannot read back) and whether you agreed to product emails.
Your resumes: everything you type into them, including a photo if you add one. Without an account they stay in your browser and never reach us unless you download a file; with an account they are stored in our database so you can open them anywhere.
The email address you give when you download a resume, whether you ticked the box for offers, and when you confirmed that choice through the link we email.
Your plan: which plan you have and when it renews or ends. Payments go through Paddle; we never see or store your card number.
Technical information our servers record with every request, such as your IP address, browser and the page you asked for, to keep the service working and to stop abuse.
Why we use it
To give you the service you asked for: keeping your resumes, producing PDF, Word and text files, signing you in, and sending emails your account needs, such as password resets and a reminder before a plan renews.
With your consent, which you can take back at any time: offers by email (discount codes and job-search tips) only to addresses whose owner ticked the box and then confirmed it through the link we email (for an account, a confirmed address with the product-email box ticked), each with an unsubscribe link, and analytics cookies if you allow them.
Because we have a legitimate interest in a service that is safe and works: server logs, limits on how often requests can be made, and error reports.
Because the law requires it: tax and accounting records for payments, which Paddle keeps as the merchant of record.
What we never do
We don't sell your personal data or share it for advertising.
We don't show your resume to recruiters or employers. Only a share link you create yourself lets someone else see it, and you can turn it off.
We don't use your resumes to train AI models.
Who helps us run VirezoCV
These companies process data for us, only to provide their part of the service and under contracts that require them to protect it:
Neon (database hosting): your account and saved resumes, stored in Frankfurt, Germany, and encrypted at rest.
DigitalOcean, LLC (USA) (hosting): the servers that run the site and produce your files.
Paddle.com (payments): Paddle is the merchant of record for every purchase. It handles payment, tax and invoices, and its own privacy notice covers the payment details you give it.
Resend (email delivery): sends account emails such as password resets, and offers only to addresses that agreed to them.
Transfers outside Europe
Some of these companies are based in the United States or the United Kingdom. Where data leaves the European Economic Area it is protected by the European Commission's Standard Contractual Clauses, an adequacy decision, or the EU-US Data Privacy Framework.
How long we keep it
Your account and resumes: until you delete them, or your account. Deleting is permanent.
The address you gave for downloads: until you ask us to remove it, or delete an account with the same address. Consent to offers ends when you unsubscribe.
Server logs: for a short time, after which newer logs overwrite them.
Payment and tax records: as long as tax law requires, kept by Paddle.
Your choices and rights
In your account settings you can download all your data as a file and delete your account, with everything in it, at any time.
You can also ask us what we hold about you, to correct it, to delete it, or to stop using it, and you can take back any consent. Write to [email protected]; we answer within one month.
If you think we have handled your data wrongly, you can complain to the data protection authority where you live.
Children
VirezoCV is not meant for children under 16, and they should not create an account.
Security
Connections to the site are encrypted, passwords are stored only as hashes, the database is encrypted at rest, and only the people who run the service can reach it.
Changes to this policy
When this policy changes, the date at the top changes too. If a change matters to how your data is used, we tell account holders by email before it takes effect.