Privacy policy
Your CV is used only to make your CV. It is not sold, not analysed for other purposes, not passed to recruiters, and not used to train anything.
Who is responsible
Ilian Kara-Mostefa, Entrepreneur individuel (micro-entreprise), SIREN 939 023 735, 173 rue de Courcelles, 75017 Paris, France. For any question, or to exercise your rights: contact@fillcv.com.
What we process, and why
| What for | Which data | Who else has access | On what basis |
|---|---|---|---|
| Filling your template from the material you provide | the text you give — the contents of an existing CV, or your background as you describe it — sent for the time it takes to generate, and kept neither by the provider under our contract nor by us: neither the text supplied nor the CV produced is stored by this service | Anthropic PBC, Vercel Inc. | contract |
| Producing your CV as a PDF | the contents of your CV and, if you add one, your photo — sent at the moment of production, never kept by the service that prints it | Scaleway SAS, Vercel Inc. | contract |
| Saving your CVs so you can find them again | your email address, your CVs and your photos | Supabase, Vercel Inc. | contract |
| Showing you the list of CVs you have downloaded | the date, the field, the template and the title you gave the document — never the contents of the CV, never the photo | Supabase, Vercel Inc. | contract |
| Giving you access to what you bought | your email address, the plan, its dates | Stripe Payments Europe, Limited, Supabase, Vercel Inc. | contract |
| Warning you before every charge, and letting you cancel | your email address | Scaleway SAS — email delivery, Supabase, Vercel Inc. | contract |
| Issuing and keeping invoices | your email address, the amounts, the dates | Stripe Payments Europe, Limited, Scaleway SAS — email delivery, Vercel Inc. | legal obligation |
| Answering you when you write to us | your email address, your name if you give it, and your message — kept for the time of the exchange, never added to a mailing list | Scaleway SAS — email delivery, Vercel Inc. | legitimate interests |
| Preventing a robot from producing thousands of PDFs | a fingerprint of your IP address, computed with a secret key — the address itself is never stored | Supabase, Vercel Inc. | legitimate interests |
For how long
- Account, saved CVs and download history — 24 months after the last sign-in
- After that, the account and all its documents are deleted automatically, with nothing for you to do. You can also delete them yourself at any time.
- Unsaved CV — as long as it takes to produce the PDF
- Until you have an account, your CV stays in your browser. It reaches our servers only when you ask for a PDF, for the time it takes to print it, and nothing is kept afterwards.
- Abuse counter — 24 hours
- We do not keep your IP address, only a fingerprint computed with a secret key, from which the address cannot be recovered, and only for as long as it takes to count requests within the same hour.
- Invoices and subscriptions — 10 years
- Accounting obligation (article L. 123-22 of the French commercial code). This is why deleting an account erases the CVs but keeps the record of purchases, detached from the account.
Who else has access
Nobody other than the providers below, and each only for what concerns them. None of them may use your data for their own purposes.
| Provider | Role | Where |
|---|---|---|
| Vercel Inc. | hosts the site | United States (company), servers in Europe — transfer safeguarded by: European Commission standard contractual clauses, decision (EU) 2021/914, incorporated into Vercel’s data processing addendum |
| Supabase | hosts the database, the accounts and the photos | Paris, France |
| Scaleway SAS | runs the service that produces the PDFs | Paris, France |
| Stripe Payments Europe, Limited | takes payments and issues invoices | Ireland (company), transfers outside the Union possible within the group — transfer safeguarded by: European Commission standard contractual clauses, decision (EU) 2021/914, incorporated into Stripe’s data processing agreement |
| Scaleway SAS — email delivery | sends invoices, reminders before charges, and cancellation links | Paris, France |
| Anthropic PBC | powers the writing assistance, on explicit request and for Pass plans | United States — transfer safeguarded by: European Commission standard contractual clauses, modules two and three, incorporated by reference into Anthropic’s data processing addendum, itself incorporated into the commercial terms without separate signature |
The service that produces your PDFs
It runs in France, and that is a decision. Third-party rendering services would have received your entire CV, photo included, on every download — free ones too. Ours receives your CV for the time it takes to print it and writes it nowhere: no file, no database, no log.
Your IP address
We do not store it. To stop a robot from producing thousands of PDFs, we compute a fingerprint using a key only we hold, and we keep only that fingerprint, for an hour. Without the key the address cannot be recovered — and the key is written nowhere in the site.
Trackers
No advertising cookie, no analytics, no social network. The only cookies set are the ones that keep you signed in, and they disappear when you sign out.
There is no third-party script on this site. No analytics, no font served elsewhere, no share button — not even the payment one: when you buy, we send you to our provider’s page, and you come back afterwards. We never see your card number, and no page of this site reports your visit to anyone.
The fonts are served from our own domain, not from an outside service. It is a detail nobody looks at and it matters: a font loaded elsewhere reports your visit to its host, on every page.
Your rights
At any time you can access your data, correct it, take it away in a machine-readable format, have it erased, or object to a processing operation. Write to contact@fillcv.com — we answer within a month, and usually well before.
Deleting your account erases your CVs and your photos immediately. Invoices remain, detached from your account: accounting law requires us to keep them, and that is the one thing we cannot erase at your request.
If our answer does not satisfy you, you can complain to the CNIL, the French data protection authority — cnil.fr/fr/plaintes.