Privacy Policy

The data controller is the operator of Live CV, reachable at dimi.development@gmail.com. If you are in the EEA, UK, or Switzerland, this is the entity responsible for your personal data under applicable data protection law.

• Account data: name, email address, and authentication identifiers, managed by our authentication provider Clerk.
• Profile data: the CV information you enter or upload, such as work history, education, skills, projects, certifications, languages, and contact details.
• Uploaded files: CVs and resumes you upload for parsing (PDF, DOCX, images). File contents are processed to extract structured data and are not permanently stored as files.
• Generated content: CVs, cover letters, and LinkedIn content generated for you, including generation metadata (model used, token usage).
• Job data: job descriptions and URLs you save, and content retrieved from URLs you submit.
• Chat data: messages you send to the AI assistant.
• Technical data: standard server logs (IP address, browser type, timestamps) processed by our hosting provider for security and reliability.

We only use strictly necessary cookies: authentication cookies from Clerk and security cookies from Cloudflare. These are required to provide the service and do not require consent. We do not use analytics, advertising, or tracking cookies.

• Providing the service (performance of a contract): storing your profile, generating and tailoring documents, parsing uploaded CVs, and operating the chat assistant.
• Security and abuse prevention (legitimate interest): protecting the service and your account.
• Legal compliance (legal obligation): keeping records where the law requires it.

We do not use your personal data to train AI models, and we do not show you advertising or sell your personal data.

Document generation, CV parsing, and the chat assistant send relevant parts of your data to large language model providers. They process this data only to generate your content, under their API terms:

• Google (Gemini API) for generation and OCR: Google Privacy Policy
• OpenAI for generation: OpenAI Privacy Policy

Infrastructure subprocessors: Cloudflare (hosting, database, storage) and Clerk (authentication).

We share personal data only with the subprocessors listed above, as needed to run the service. We may also disclose data if required by law, or in connection with a merger or acquisition of the service.

We do not sell your personal data.

Our subprocessors are based in the United States and process data globally. Where your data is transferred outside the EEA, UK, or Switzerland, it is protected by the transfer mechanisms our subprocessors provide, such as adequacy decisions or Standard Contractual Clauses under their respective data processing terms.

We keep your data for as long as your account exists. You can delete individual documents, jobs, and profile sections at any time, and they are removed from the database immediately.

You can delete your entire account from your profile page. This permanently deletes all of your data from our database, clears cached data, and deletes your authentication account. Temporary caches expire within minutes, and infrastructure backups may retain deleted data for up to 30 days before it is purged.

We extend the following rights to all users, wherever you live:

• Access the personal data we hold about you
• Correct inaccurate data (you can edit everything in-app)
• Delete your data (in-app, per item or your whole account)
• Export your data
• Object to or restrict processing
• Withdraw consent where processing is based on consent

To exercise any right, email dimi.development@gmail.com. We respond within one calendar month.

If you are in the EEA or UK and believe we have not handled your data properly, you can complain to your local data protection authority, such as the UK Information Commissioner's Office. If you are a California or US state resident, state law gives you equivalent rights to know, delete, correct, and opt out of sale or sharing; we do not sell or share your data for advertising, so there is nothing to opt out of.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Our AI features draft content for your review; you decide what to keep, edit, and send.

The service is not directed at anyone under 16, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We use reasonable technical and organizational measures to protect your data, including encrypted transport, authenticated access controls, and least-privilege infrastructure. No system is perfectly secure, so please take care with what you upload.

If we make material changes, we will update the date at the top of this page and, where appropriate, notify you in the app or by email. Questions: dimi.development@gmail.com.