Privacy Policy

1. Data Controller

2. Data We Collect

Account Data:

• Email address (for login and communication)
• Name (optional, for personalization)
• Profile picture (optional)

CV Content:

• Personal information in your CVs
• Work experience, education, skills
• Uploaded documents and images

Technical Data:

• IP address (temporarily for security)
• Browser information
• Usage statistics (anonymized)

3. Purpose of Data Processing

• Providing the CV editor service
• Storing and syncing your CVs
• Customer service and technical support
• Service improvement (anonymized data)
• Legal compliance and security

4. Legal Basis (GDPR)

• Art. 6(1)(b) GDPR: Contract performance (service provision)
• Art. 6(1)(a) GDPR: Consent (optional features)
• Art. 6(1)(f) GDPR: Legitimate interests (security, improvement)

5. Third-Party Services

Currently used services:

• Clerk (User Authentication): EU/US, GDPR compliant
• Supabase (Database): EU hosting, GDPR compliant
• Vercel (Hosting): EU region, GDPR compliant
• OpenAI (AI Features): US, Data Processing Agreement

6. Data Retention

• Account Data: Until account deletion
• CV Content: Until manual deletion or account deletion
• Logs/Metadata: Maximum 90 days
• Backups: Automatic deletion after 6 months

7. Your Rights

Under GDPR, you have the following rights:

• Access to your stored data
• Rectification of incorrect data
• Erasure of your data
• Restriction of processing
• Data portability
• Object to processing
• Lodge a complaint with supervisory authority

Contact us at privacy@talent.de for requests regarding your rights.

8. Security

• Encryption of all data transmissions (TLS)
• Encrypted data storage
• Regular security updates
• Access control and authentication
• Monitoring and incident response

9. Cookies

We only use technically necessary cookies for service functionality. No tracking or marketing cookies in the beta version.

• Session cookies (login)
• Preference cookies (language setting)
• Security cookies (CSRF protection)

10. Changes

This privacy policy may be updated. We will notify you of significant changes via email.

11. Contact