CV Builder

Privacy Policy

Last updated : 09/05/2026

1. Introduction

CV Builder ("we", "our", "us"), headquartered in Switzerland, is committed to protecting the privacy of users of our service. This privacy policy explains how we collect, use and protect your personal data in accordance with the Swiss Federal Data Protection Act (FADP) and the European General Data Protection Regulation (GDPR) where applicable.

2. Data Controller

The data controller is:

  • Alexandre Prado (CV Builder)
  • Rue Guillaume de Marcossay 21, 1205 Geneva, Switzerland
  • Email : [email protected]
  • Self-employed individual. Not registered in the commercial register of Geneva (annual turnover below CHF 100,000). Not subject to VAT.

3. Data Collected

We collect the following types of data:

  • Identification data: name, surname, email address
  • CV data: professional information, education, skills that you choose to enter
  • Technical data: IP address, browser type, cookies
  • Connection data: login logs, activity on the service
  • Payment data: processed by our secure payment provider

4. Legal Basis for Processing

In accordance with the FADP and GDPR, we process your data on the following bases:

  • Contract performance (art. 31 FADP): to provide our CV creation services
  • Consent (art. 6 FADP): for analytics and marketing cookies
  • Legitimate interest: to improve our services and ensure security
  • Legal obligation: to comply with our Swiss accounting and tax obligations

5. Use of Data

Your data is used to:

  • Create and manage your user account
  • Provide our CV creation and export services
  • Process payments and manage subscriptions
  • Improve and personalize your experience
  • Ensure security and prevent fraud
  • Contact you regarding your account or our services
  • Comply with our legal obligations

6. Cookies

We use different types of cookies:

  • Essential cookies: necessary for the site to function (authentication, security)
  • Analytics cookies: to understand how you use our service (with your consent)
  • Marketing cookies: to offer you relevant advertisements (with your consent)

You can manage your cookie preferences at any time via our consent banner.

6bis. Google Ads Conversion Tracking

When you subscribe to a paid plan and have accepted marketing cookies, we transmit conversion data to Google Ads for advertising measurement purposes:

  • Google click identifier (gclid/wbraid/gbraid) — stored for a maximum of 90 days, then automatically deleted
  • Transaction amount and currency (no banking data)
  • Hashed email address (SHA-256, Enhanced Conversions) — only if marketing consent is active
  • Conversion date and time (Europe/Zurich timezone)

You can withdraw your marketing consent at any time via the cookie banner or your account settings. Withdrawal results in the immediate deletion of your advertising identifiers (gclid) and stops all data transmission to Google Ads.

7. Data Sharing

We never sell your personal data. We may share your data with:

  • Our service providers (hosting, payment) under confidentiality agreements
  • Competent Swiss authorities if required by law

8. International Transfers

Your data is hosted within the European Union, in GDPR-compliant data centers. In case of transfer to third countries without adequate protection, we ensure appropriate safeguards are in place (standard contractual clauses, adequacy decision by the European Commission).

9. Data Retention

We retain your data as long as your account is active or as necessary to provide our services. After account deletion:

  • Account data: deleted within 30 days
  • Billing data: retained for 10 years (Swiss legal obligation)
  • Security logs: retained for 1 year
  • Advertising identifiers (gclid): deleted after 90 days
  • Google Ads conversion data: retained for a maximum of 2 years

10. Your Rights

In accordance with the FADP and GDPR (if applicable), you have the following rights:

  • Right of access (art. 25 FADP): obtain a copy of your data
  • Right of rectification: correct inaccurate data
  • Right to erasure: request deletion of your data
  • Right to restriction: limit processing of your data
  • Right to portability (art. 28 FADP): receive your data in a structured format
  • Right to object: oppose processing of your data
  • Right to withdraw consent: at any time for consent-based processing

To exercise these rights, contact us at: [email protected]

11. Security

We implement appropriate security measures to protect your data:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of sensitive stored data (AES-256)
  • Secure authentication (JWT, bcrypt hashing)
  • Strict access controls
  • Access monitoring and logging

12. Changes

We may update this privacy policy. In case of substantial changes, we will notify you by email or via a notification on our service.

13. Supervisory Authority and Remedies

If you believe that the processing of your data violates your rights, you can:

  • Contact us directly to resolve the issue
  • File a complaint with the Federal Data Protection and Information Commissioner (FDPIC)
  • For EU/EEA residents, contact your local data protection authority

14. Contact

For any questions regarding this policy or your personal data: