Privacy Policy

This policy explains what information the operator of EmeraldCV (“we” or “us”) handles through emeraldcv.com, why, and the choices you have.

The short version

• We store what you write so you can use it from any device. We use it for nothing else: no advertising, no selling, no training of AI models.
• You can download everything in open formats, and delete your account with everything in it, from your account page at any time.
• The site uses one cookie, to keep you signed in, and counts visits without cookies.

Your account

To make an account we need your email address and a name. If you choose a password, we store only a one-way hash of it. Sign-in codes we email you are stored hashed and expire after a few minutes.

If you sign in with Google or Apple, they tell us your email address and name. We store the identifier they give us, and their sign-in tokens encrypted; we don't use those tokens to read anything from your Google or Apple account.

For each device you're signed in on, we keep a session with its browser's description and IP address, so you can see your devices on your account page and sign them out. Sessions end after 30 days without use, or when you sign out.

We also note your browser's language when you sign up, to choose the paper size, date style and photo convention your CVs start with.

Your profiles and CVs

Everything you write in EmeraldCV, such as your name, contact details, roles, studies, skills, languages and the CVs you make from them, is stored in our database so you can work on it from any device. Only your account can read it.

If you add a photo, your browser shrinks it and removes its camera details before sending it, and our server checks it again. Photos are stored with Cloudflare R2, a storage service, and are shown only to your account. A photo you replace or remove is deleted within two days.

PDFs are made on our servers when you download them and are not kept. The hiring-system check reads your PDF on our servers in the same way, and keeps nothing.

Emails

We send you the emails your account needs: codes to confirm your address or sign in, a code to reset your password, and a last message when you delete your account. We send no newsletters or marketing. Emails are delivered by an email service provider on our behalf.

Payments

EmeraldCV Pro is paid through Stripe. Your card details go to Stripe and never reach us. Stripe tells us which plan you bought, its status and when a weekly plan's period ends, and gives us a customer reference so you can manage your subscription. Stripe handles your payment under its own privacy policy.

Counting visits

To learn which pages and features are useful, we count visits with Umami, an analytics tool we run on our own servers. It sets no cookies, does not store your IP address, identifies visits with a hash that changes every day, ignores query strings and respects Do Not Track. It records the page, the referring site, your browser, device type and country.

In the app it also counts three actions, with fixed values only: that the Pro offer was shown and why, that a checkout was started and for which plan, and that a CV was downloaded and in which design. Never anything you write.

Running the service

Like any website, our servers and Cloudflare, which delivers the site, process your IP address and browser details to send you each page and to protect the service from abuse, for example by limiting how often a code can be requested. Those counters expire within a day; server logs are kept for a limited time for security and troubleshooting.

Cookies and storage

EmeraldCV sets one cookie, which keeps you signed in. It is needed for the service to work, so we don't ask for consent to it. If you choose a light or dark appearance, that choice stays in your browser's storage and is never sent to us.

How long we keep things

Your profiles, CVs and photos stay until you delete them or your account. When you delete your account, everything in it is deleted at once, including the record of what you bought, its photos are removed from storage, and a running subscription is ended first. Stripe keeps the records of payments that the law requires, under its own policy.

Legal bases

Where the GDPR or similar laws apply, we handle your account, profiles, CVs and payments to provide the service you asked for, under our contract with you. We count visits and protect the service under our legitimate interests in understanding how it is used and keeping it safe, in ways designed not to identify you.

Your rights

You can see and change everything you wrote in the app, download all of it from your account page in open formats, and delete your account at any time. You can also ask us for a copy of anything else we hold about you, for a correction or for its deletion, and you can complain to your data protection authority.

Children

EmeraldCV is meant for people old enough to apply for work. It isn't directed at children, and we don't knowingly collect information from them.

Changes

We may update this policy as EmeraldCV changes or the law requires. When a change matters, we will say so on this page and update the date above before it takes effect.

Contact

A contact address for questions is on its way; until it is, use the account page to download or delete your data.