Privacy Policy

CVPage.io ("CVPage", "we", "us", or "our") is a service operated and powered by Ornalo LLC, a company registered in the United States of America. This Privacy Policy explains what information we collect when you use cvpage.io, why we collect it, and how we keep it safe.

1. Information we collect

We collect only the information needed to provide and improve the service:

• Account data: your email address, username, full name, and password (stored as a secure hash).
• Profile data: optional information you choose to add such as job title, bio, location, avatar, and links to your social profiles.
• CV files: the PDF files you upload, their labels, and metadata (file name, size, upload date).
• Usage data: aggregated page views and CV download counts on your public profile, including the referrer domain (e.g. linkedin.com) so we can show you analytics.
• Payment data: handled entirely by our payment processor (Stripe). We never see or store your card details — we only keep a customer reference ID and your subscription status.

2. How we use your information

• To create and operate your CVPage account.
• To host your public profile at cvpage.io/yourname.
• To show you analytics about views and downloads.
• To process payments for Pro upgrades.
• To send essential service emails (account confirmation, password reset, payment receipts).
• To detect, prevent, and respond to fraud, abuse, or security issues.

We do not sell your personal data, and we do not use your CV content to train AI models for third parties.

3. Public information

By design, your CVPage profile is public. Your username, full name, profile information, and any active CVs you upload are visible to anyone who visits cvpage.io/yourname. Do not upload documents that contain information you don't want to be publicly accessible.

4. Cookies and tracking

We use only the cookies and local storage required to keep you logged in and to remember basic preferences. We do not run third-party advertising trackers on cvpage.io.

5. Service providers

We rely on a small number of trusted vendors to operate the service:

• Supabase — authentication, database, and file storage.
• Stripe — payment processing.
• Cloudflare — hosting, content delivery, and security.

Each of these providers is contractually required to protect your data and use it only to deliver their service to us.

6. Data retention

We keep your account and CV files for as long as your account is active. If you delete your account, your profile, CVs, and analytics data are permanently removed within 30 days, except where we are required to retain limited records (e.g. invoices) to comply with the law.

7. Your rights

Depending on where you live (e.g. EU/UK GDPR, California CCPA), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Export your data in a portable format.
• Object to or restrict certain processing.

To exercise any of these rights, email us at support@cvpage.io.

8. Security

We use industry-standard encryption in transit (HTTPS) and at rest, hashed passwords, and strict database access controls. No system is 100% secure, but we work continuously to protect your data.

9. Children

CVPage is not intended for children under 16. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email.

11. Contact us

CVPage.io is powered by Ornalo LLC, USA.
For any privacy question or request, contact us at support@cvpage.io.