Privacy Policy

We collect the following information when you use HandyCV:

• Account data — your name and email address, provided by Google when you sign in via Google OAuth.
• CV data — personal information, work experience, education, skills, and projects that you enter into the builder.
• Usage data — basic logs such as which pages you visit and when, used to maintain and improve the service.

We do not collect payment card details directly. Payment processing for Pro plans is handled by a third-party provider.

We use your data to:

• Create and manage your account
• Store and render your CVs
• Send emails to recruiters on your behalf when you use the email feature
• Maintain the security and performance of the service
• Comply with legal obligations

We do not use your CV content for advertising, profiling, or any purpose other than operating the service for you.

Your account and CV data are stored in a MongoDB database. Data is stored in the region closest to you where our database provider operates, with encryption at rest and in transit.

Authentication sessions are managed by better-auth and stored as secure, HTTP-only cookies in your browser.

HandyCV uses the following third-party services:

• Google OAuth — for sign-in authentication. Governed by Google's Privacy Policy.
• Email provider — used to deliver CVs to recruiter addresses you specify. Only your email body, subject, and CV attachment are shared.
• Hosting infrastructure — the platform that serves the application. Your data does not leave this infrastructure except for the services listed above.

We retain your account and CV data for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days.

Anonymised usage logs may be retained for up to 12 months for service improvement purposes.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your CV data at any time from within the builder
• Withdraw consent — by closing your account

To exercise any of these rights, contact us at hello@handycv.com.

HandyCV is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a notice in the app. The "Last updated" date at the top of this page always reflects the most recent revision.

For any privacy-related questions or requests, please email us at hello@handycv.com.