Privacy Policy

Updated on 07/08/2025

The purpose of this privacy policy is to inform users of the MyCVApp website (the “Site”) (regardless of where they access or visit the Site) about how we process personal information when they visit the Site, and to inform them of their privacy rights and how the law protects them.

Because we offer our services globally, we have chosen to use the European Union model (GDPR), often considered the strictest model in terms of user transparency, as the format of this privacy policy.

ARTICLE 1. DEFINITIONS

Personal Data :

Depending on where users of our Site are located, and the privacy laws applicable to the collection and processing of their personal information, personal data means any information relating to a household or an identified or identifiable natural person (hereinafter referred to as the “data subject”); an “identifiable natural person” is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical, physiological, genetic, psychological, economic, cultural or social identity.

Processing :

Any operation or set of operations performed or not performed using automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available online, alignment or interconnection, restriction, erasure or destruction.

LIL :

The so-called “Informatique et Libertés” law no. 78-17 of January 6, 1978.

Controller :

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing.

GDPR :

The EU General Data Protection Regulation of April 27, 2016.

Recipient :

The natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party.

ARTICLE 2. ACCEPTANCE OF THIS PRIVACY POLICY

When using the Site, by clicking “Continue”, “Pay and Download” or “Continue with Google/Apple”, you confirm that you have read and accepted this Privacy Policy.In the event that this Privacy Policy is amended, you must review its updated version and acceptance is obtained upon the next login after the amended privacy policy comes into effect. However, personal data are processed in accordance with the Privacy Policy in force at the time of their collection.

ARTICLE 3. USERS UNDER 18 YEARS OLD

Our Site is not intended for minors. No one under the age of 18 may provide information on the Site. We do not knowingly collect personal information from minors. If you are under 18, do not use or provide information on this site or through any of its features, do not register on the site, make purchases on the site, use any interactive features or public comment features of this site, or provide us with any information about yourself, including your name, address, phone number, email address, or any screen name or username you may use. If we learn that we have collected or received personal information from a minor, we will delete such information. If you believe we might have information from or about a minor, please contact us using the form provided for this purpose on the Contact page of our site.

ARTICLE 4. DATA COLLECTED AND PURPOSES OF PROCESSING

Credit/debit card details and personally identifiable information will not be stored, sold, shared, or rented to third parties.

We have set out below, in table form, a description of all the ways we plan to use your personal data and, if you are based in the European Union or the United Kingdom, the legal bases on which we rely to do so. Where we rely on legitimate interests as a legal basis, we have also identified what those legitimate interests are, if any.

PURPOSE	DATA PROCESSED	LEGAL BASIS	RETENTION PERIOD
Creation and management of the personal online account	Email address and password, third-party ID (Google/Apple)	Performance of contract/service	2 (two) years from the end of the subscription
Login to your personal account	Email address and technical identifiers, access logs	Performance of contract/service	2 (two) years from the end of the subscription
CV creation by the User	First name, last name, email address	Performance of contract/service	2 (two) years from the end of the subscription
Management of subscription payments – invoicing Book-keeping	Bank details Identity, postal address	Performance of contract/service	13 (thirteen) months from the debit date or 15 (fifteen) months if payment is made with a deferred-debit card.
Invoicing Book-keeping	Identity, postal address, payment method used	Compliance with a legal obligation (to comply with applicable accounting laws)	Current financial year plus ten (10) years.
Prevention and fight against IT fraud	Usage and login logs relating to the User’s actions on the Site, technical logs recording activity of software and hardware components used by the User, IP address	Legitimate interest	For logs: 6 (six) months from the last login

For the IP address: 1 year from the date of recording | | Management of requests to exercise rights relating to personal data | First name, last name, gender, email address, phone number, content of the request, ID document if necessary | Compliance with a legal obligation | 5 (five) years from the request. ID document: time necessary to verify the person’s identity | | Use of cookies for statistical analysis and improvement of the Site | IP address | Consent | 5 (five) years from the last login. |

HOSTING PROVIDER

Personal data are hosted by OVH SAS in France.

INTERNATIONAL TRANSFERS

EU and UK Residents

Since we are based in LONDON, we will also process your personal data in LONDON. This will involve transferring your information to LONDON.

In addition, a number of our service providers are based outside the United Kingdom and the European Economic Area, so the processing of our users’ personal data in connection with the services they provide will also involve a transfer of information outside the UK and the EEA.

If you are based in the United Kingdom or the European Union, please note that whenever we transfer your personal information outside the UK and the EEA, we ensure that a similar level of protection is granted by ensuring that at least one of the following safeguards is implemented:

We will only transfer your personal information to countries that have been deemed to provide an adequate level of protection for personal information by the European Commission. For more details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
Where we use certain service providers based outside the UK and the EEA, we may use specific contracts approved for use in the UK or by the European Commission (as applicable) that grant personal information the same protection as in Europe, namely the UK International Data Transfer Agreement or the UK International Data Transfer Addendum to the European Commission Standard Contractual Clauses for international data transfers, or the European Commission Standard Contractual Clauses (as applicable). For more details, see European Commission: Standard contractual clauses for the transfer of personal data to third countries and UK Information Commissioner’s Office: International Data Transfer Agreement and Guidance
Where we use service providers based in the United States, such as Google, we may transfer your personal data to them if they are part of the EU-U.S. and/or Swiss-U.S. Data Privacy Framework. Where we use service providers based in the United States, such as Google, we may transfer your personal data to them if they are part of the EU-U.S. and/or Swiss-U.S. Data Privacy Framework, which requires them to provide similar protection to personal information shared between Europe and the United States. For more details, see the Data Privacy Framework .

Please contact us using the form provided for this purpose on the contact page of our site if you would like more information about the specific mechanism we use when transferring your personal data outside the UK or the EEA.

Canadian Residents

If you are based in Canada, please note that when you log in to our site or when we provide you with our services, we will transfer your personal information outside Canada for processing in accordance with this privacy policy.

We will also transfer outside Canada the personal information about you that we collect, receive from third parties, or that you provide to us, as described in this privacy policy, to contractors, service providers, and other third parties we use to support our operations (such as analytics and search engine providers who help us improve and optimize the site).

When we transfer your personal information abroad or to a foreign country, these countries have different privacy laws that may or may not be as comprehensive as Canadian laws. In such circumstances, the governments, courts, law enforcement, or regulatory agencies of that country may be able to access your personal information under the foreign country’s laws. Whenever we engage a service provider, we require its privacy and security standards to comply with this privacy policy and applicable Canadian privacy laws. For more information about our policies and practices regarding the use of service providers located outside Canada, please contact us using the form provided for this purpose on the contact page of our site.

By submitting your personal information or engaging with the Site, you consent to such transfer, storage, or processing.

ARTICLE 5. DATA CONTROLLER AND RECIPIENTS OF PERSONAL DATA

The controller of personal data is the company whose registered office is located at the company’s address.

The recipients of personal data are:

The company, publisher of the Site,
Our hosting service provider,
Our accountants and lawyers,
Google,
Our banking service provider for subscription payments.

In any case, the User is informed that no personal information concerning them is communicated to advertising agencies or, more generally, to any company operating in the field of advertising. No personal data is shared or disclosed without the User’s consent outside the recipients listed above.

Notwithstanding the above, we may disclose the personal information we collect or that you provide as described in this privacy policy to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or any other sale or transfer of part or all of the company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceedings, in which personal information held by the company about users of our site is among the assets transferred.

We may also disclose your personal information:

To comply with a court order, law, or legal process, including to respond to any government or regulatory request.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the company, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

ARTICLE 6. DATA SECURITY AND CONFIDENTIALITY

Data security and confidentiality

In accordance with its security obligation, the company undertakes to ensure the confidentiality and security of personal data by complying with the requirements of the LIL and the GDPR.

The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted through our site. Any transmission of personal information is at your own risk. We are not responsible for the circumvention of privacy settings or security measures we provide.

ARTICLE 7. YOUR RIGHTS

Article 7.1. Right of Access (Article 15 GDPR)

You have the right to obtain confirmation as to whether or not personal data concerning you are being processed. Where data are processed, you have the right of access to such data and to the following information:

The purposes of the processing.
The categories of personal data concerned.
The recipients or categories of recipients to whom the data have been or will be disclosed.
Where possible, the envisaged retention period of the data or, where this is not possible, the criteria used to determine that period.
The existence of the right to request rectification or erasure of data, or restriction of processing, or the right to object to processing.
If you are based in France, the right to lodge a complaint with the CNIL as supervisory authority, or with your national data protection authority if you are based in the United Kingdom or another EU country.
Where personal data are not collected directly from you, any available information regarding the source of the data.
The existence of automated decision-making, including profiling, and, at least in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

A copy of the data undergoing processing will be provided to you.

A reasonable fee based on administrative costs may be charged for any additional copy you request.

If you request a copy of the data in digital form, it will be provided in a commonly used digital format, unless you have requested otherwise.

Finally, the right to obtain a copy of personal data must not adversely affect the rights and freedoms of others.

Article 7.2. Right to Rectification (Article 16 GDPR)

You have the right to request the rectification of inaccurate data concerning you, without undue delay. You also have the possibility to have incomplete personal data concerning you completed, including by providing a supplementary statement to that effect.

Article 7.3. Right to Erasure (Article 17 GDPR)

You have the right to request the erasure of your personal data as soon as possible where one of the following grounds applies:

The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
You withdraw your consent on which the processing is based and there is no other legal basis for the relevant processing. Withdrawal of consent applies for the future.
You exercise your right to object and there is no other legitimate ground required for the processing.
The personal data have been unlawfully processed.
5.5.5.The personal data must be erased to comply with a legal obligation.

You are informed that the right to erasure may not apply if the processing is necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims.

Article 7.4. Right to Restriction of Processing (Article 18 GDPR)

You have the right to request restriction of processing of your personal data where one of the following situations applies:

Verification of your data after you dispute the accuracy of your personal data.
The processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use.
The company no longer needs your personal data in relation to the processing but the data are necessary for you for the establishment, exercise, or defense of legal claims.
You have objected to the processing and the company is verifying whether the legitimate grounds pursued by the company override your legitimate grounds.

Article 7.5. Right to Data Portability (Article 20 GDPR)

You have the possibility to receive your personal data in a structured, commonly used and machine-readable format where:

The processing is based on consent or on performance of a contract.
And the processing is carried out using automated processes.

The personal data concerned are those provided/entered by the user.

As part of exercising this right, you have the right to have your personal data transmitted directly to another controller where technically feasible.

The right to portability must not adversely affect the rights and freedoms of others.

Article 7.6. Right to Object (Article 21 GDPR)

Pursuant to the right to object, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data based on the company’s legitimate interests.

Personal data will no longer be processed unless it is demonstrated that there are compelling legitimate grounds for the processing which override your interests and your rights and freedoms or for the establishment, exercise, or defense of legal claims.

Article 7.7. Fate of Personal Data After Death

Under the law, you have the right to define your guidelines regarding the retention, erasure, and disclosure of your personal data in the event of death.

You can communicate your instructions to us, or register them with a certified trusted digital third party. You can therefore designate the person of your choice who will be responsible for carrying out your instructions. Otherwise, it will be your heirs.

The company will, of course, respect your directives and undertakes to destroy personal data after their communication to the designated person, where applicable, unless the company must still retain such personal data due to a legal obligation or for evidentiary purposes.

Your Privacy Rights in Your State

California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia grant their state residents the following rights:

Confirm whether we process their personal information.
Access certain personal information and delete it.
Correct inaccuracies in their personal information, taking into account the nature and purpose of the processing (excluding Iowa and Utah).
Data portability.
Opt out of the processing of personal data for :
targeted advertising (except Iowa),
sales, or
profiling in connection with decisions that produce legal or similarly significant effects (except Iowa and Utah).
Limit (opt-out) or require consent to process sensitive personal information.

The exact scope of these rights may vary from state to state. To exercise any of these rights, please contact us via the form provided for this purpose on the Contact page of our Site. To appeal a decision regarding a consumer rights request, please contact us at the following email address: [email protected]

ARTICLE 8. HOW TO EXERCISE YOUR RIGHTS

Article 8.1. Procedure for Exercising Rights

For any requests concerning the personal data processed by “PROFILEADS LIMITED”, you can send your requests using the following form or to the following addresses:

By mail: 24 Linacre House Archdale Close, Chesterfield, England, S40 2GE.
By form via the contact page

The company may ask you for a copy of your ID in case of doubt about your identity.

Article 8.2. Response Time

The company has a period of one (1) month from receipt to respond to your request. This period may be extended to two months given the complexity and number of requests. The company will inform the data subject within one month of their request.

If you exercise your right to erasure or your right to erasure, you are informed that the company may need to archive your personal data before deleting them.

You also have the right to lodge a complaint with the CNIL, the French supervisory authority (www.cnil.fr) if you reside in France, or with the supervisory authority of your country of residence if you reside abroad.

ARTICLE 9. COOKIES

Some cookies require your consent before they can be installed and others only require information.

Third-party cookies may be installed on the Site.

Article 9.1. Third-Party Cookies

Third-party cookies are installed on the Site when you browse; these are Google Analytics® and Google Tag Manager® cookies.

These cookies are intended to measure audience traffic in order to generate statistics and improve the site, notably through the creation and placement of tracking tags. The website’s cookie banner on our Site allows the User to accept, refuse, or configure these cookies.

Article 9.2. Cookie Management

Cookie management on the Site

When you first visit the Site, a cookie banner will appear, allowing you to:

Either accept all,
Or refuse all,

For cookies for which consent is required, the User is informed that they can modify their choices whenever they wish.

Cookie management offered by your browser software

You can configure your browser software to:

Accept all cookies
Refuse all cookies
Refuse certain cookies depending on the issuers
Accept all cookies

If you have accepted in your browser software on each device the storage of Cookies on each device, the Cookies embedded in the pages and content you have viewed may be stored temporarily – without exceeding thirteen (13) months – in a dedicated space on your device. They will only be readable by their issuer.

Refuse all cookies or certain cookies

If you withdraw your consent, please note that a cookie will be installed to disable the storage of other cookies on your device.

Ways to make your choices depending on your browser

To configure your browser software, you should refer to your browser’s help menu.

Firefox™
Chrome™
Edge™
Safari™

Smartphone settings

To learn about the cookie management policy on your smartphone, you can consult the following pages:

Android
iOS

You are informed that depending on the settings you activate, you may no longer be able to use all or part of the Site’s features.

ARTICLE 10. DO NOT TRACK “DNT” SIGNALS

Although we take all reasonable steps to protect the privacy of visitors to our site, we cannot promise that the current programming limitations of our online applications will apply to every browser setting or respect every personal browser preference. In particular, we have not implemented the necessary program changes to honor “Do Not Track” or “DNT” browser signals. As the programming of our online applications is refined, we will take all reasonable steps to honor these requests in the future. Please consult this privacy policy for further updates on this matter.