Who we are
CV Teaser is an AI-powered CV analysis and optimisation platform, accessible at cvteaser.com. Our service analyses your CV, scores it against recruiter and ATS criteria, and generates tailored cover letters and adapted CVs to help you land more interviews.
- Entity: CV Teaser
- Country: France
- Email: contact@cvteaser.com
- Website: cvteaser.com
By using our services — whether via the free analysis, a one-time premium report, or a Pro subscription — you entrust your data to CV Teaser. We are committed to processing that data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable national data protection laws.
Data we collect
We collect only the data necessary to deliver our services and continuously improve your experience.
2.1 Data you provide directly
- Identity: first name, last name (optional)
- Contact: email address
- CV and professional information: work experience, education, skills, target role, sector, and any content contained in your uploaded CV
- Job descriptions: vacancy listings you submit for CV or cover letter personalisation
- Payment data: processed exclusively by Stripe — CV Teaser never stores card numbers
- Preferences and settings: language, target country, target industry
2.2 Data collected automatically
- IP address and approximate geolocation
- Browser type, operating system, screen resolution
- Pages visited, time spent, navigation path on our site
- Referral source (social media, search engine, direct link)
- Email interactions (opens, clicks)
2.3 Data generated through use of the service
- AI-generated analysis results based on your CV
- Adapted CVs and cover letters generated for your account
- Application history and analysis records
- Scores, recommendations and feedback received
We do not intentionally collect "special category" data as defined by the GDPR (racial or ethnic origin, political opinions, health data, religious beliefs, etc.). We recommend you remove any such information from CVs before submitting them.
Purposes & legal bases
Every processing activity we carry out is grounded in a valid legal basis under the GDPR. The table below details all our uses of your data.
| Purpose | Data involved | Legal basis |
|---|---|---|
| Service delivery CV analysis, report generation, cover letter and adapted CV creation | Email, first name, CV, job description | Contract performance |
| Account management Authentication, access to your history, account settings | Email, first name, usage history | Contract performance |
| Payment processing Billing, subscription management, invoicing | Email, transaction amounts, Stripe ID | Contract performance |
| Marketing communications Follow-up emails, re-engagement campaigns, product updates, promotions, job search tips, newsletters | Email, first name, preferences | Legitimate interest (existing customers) / Consent (prospects) |
| Product improvement Usage analysis, A/B testing, optimisation of our AI algorithms using aggregated and pseudonymised data | Usage data, interactions, analysis results (pseudonymised) | Legitimate interest |
| AI model training & improvement Using pseudonymised data to improve the relevance and accuracy of our analyses over time | CV content (pseudonymised), analysis results, user feedback | Legitimate interest |
| Statistical analysis & market research Understanding job market trends, sector benchmarks, anonymised aggregate reporting | Anonymised aggregate data (no personally identifiable information) | Legitimate interest |
| Security & fraud prevention Detection of abusive usage, protection against attacks and unauthorised access | IP address, logs, usage behaviour | Legitimate interest |
| Legal obligations Accounting records, responses to lawful requests from competent authorities | Email, transaction data | Legal obligation |
On legitimate interest: where we rely on legitimate interest as a legal basis, we have carried out a balancing test weighing our interests against your rights and freedoms. You may object to these processing activities at any time by contacting us or through your account settings.
Retention periods
We retain your data for as long as necessary for the purposes described above and in compliance with applicable legal obligations.
| Data category | Retention period | Justification |
|---|---|---|
| Account data (email, first name) | 3 years from last activity | Standard prospecting period (CNIL guidelines) |
| Customer data (users who made a purchase) | 5 years from end of commercial relationship | Civil and accounting limitation periods |
| CVs and submitted documents | 3 years from last use of the service | Service continuity and product improvement |
| Payment data (Stripe logs) | 5 years | Statutory accounting obligation |
| Technical logs and navigation data | 13 months | CNIL cookie guidelines |
| Pseudonymised data for AI analysis | Indefinite | Non-identifiable data — outside GDPR scope |
| Marketing emails (no opt-out exercised) | 3 years from last contact or interaction | Standard prospecting period (CNIL guidelines) |
Upon expiry of these periods, your data is either permanently deleted or irreversibly anonymised for statistical use.
Recipients & sub-processors
Your data is never sold to third parties. It may however be shared with the following technical service providers, strictly necessary for the operation of CV Teaser, under GDPR-compliant data processing agreements.
| Provider | Role | Data shared | Location |
|---|---|---|---|
| Supabase | Database & authentication | Email, first name, CV, history | EU (AWS Frankfurt) |
| Stripe | Payment processing | Email, amount, transaction ID | EU + USA (SCCs) |
| OpenAI | AI analysis & content generation | CV content (pseudonymised) | USA (SCCs) |
| Google (Gemini) | Supplementary AI analysis | CV content (pseudonymised) | EU + USA (SCCs) |
| n8n | Workflow automation | Email, processing data | EU (self-hosted) |
| Brevo / Resend | Transactional & marketing emails | Email, first name | EU |
| Amazon S3 | File storage | CVs and documents | EU (eu-west-1) |
International data transfers
Some of our sub-processors (OpenAI, Google, Stripe) are based in the United States. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring a level of protection equivalent to that applicable within the European Union.
Where data is transferred to US-based providers, it is pseudonymised to the greatest extent possible before transmission, meaning the provider cannot directly identify the individual concerned.
Cookies & trackers
CV Teaser uses cookies and similar tracking technologies to operate the service and improve your experience.
| Category | Purpose | Consent required |
|---|---|---|
| Essential cookies | Authentication, session management, security — strictly necessary for the service to function | No (necessary) |
| Analytics cookies | Audience measurement and user journey analysis (Plausible / PostHog) | Yes |
| Marketing cookies | Campaign attribution (TikTok Pixel, Meta Pixel), retargeting | Yes |
| Functional cookies | Saving your preferences (language, target country) | No (functional) |
You can manage your cookie preferences at any time via the consent banner displayed on your first visit, or by adjusting your browser settings.
Your rights
Under the GDPR, you have the following rights regarding your personal data. You may exercise any of them at any time by contacting us.
| Right | What it means in practice |
|---|---|
| Right of access | Obtain a full copy of all data we hold about you |
| Right to rectification | Correct any inaccurate or incomplete data |
| Right to erasure | Request deletion of your data (subject to legal retention obligations) |
| Right to data portability | Receive your data in a structured, machine-readable format |
| Right to object | Object to processing based on legitimate interest, including direct marketing |
| Right to restriction | Request temporary suspension of a processing activity while a dispute is resolved |
| Right to withdraw consent | Withdraw any consent given at any time, without affecting the lawfulness of prior processing |
How to exercise your rights
Send your request to contact@cvteaser.com, stating the email address associated with your account. We will respond within a maximum of one month, in accordance with the GDPR.
Unsubscribing from marketing emails
Every commercial email contains an unsubscribe link at the bottom. One click is all it takes to stop receiving our marketing communications. You will continue to receive transactional emails strictly related to your account (payment confirmation, security notices).
Data security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration or destruction.
- Encryption of data in transit (TLS/HTTPS) and at rest
- Strict database access controls (Supabase Row Level Security)
- Automated encrypted backups
- Data access limited to strictly authorised personnel
- Pseudonymisation of data before transmission to AI sub-processors
- Access monitoring and anomaly alerting
In the event of a data breach likely to affect your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform you without undue delay if the breach is likely to result in a high risk to you.
Contact & complaints
For any questions about this policy or to exercise your rights, please contact us:
Data Protection Contact
CV Teaser — contact@cvteaser.com
Right to lodge a complaint
If you believe that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the competent supervisory authority in your country of residence. In France:
- CNIL (Commission Nationale de l'Informatique et des Libertés) — www.cnil.fr
- 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
If you are based in the UK, the relevant authority is the ICO (Information Commissioner's Office) — ico.org.uk.
Changes to this policy
This policy may be updated to reflect legal developments or changes in our practices. In the event of a material change, we will notify you by email or via a notice on the site. The date of the last update is shown at the top of this page.
