Start

Privacy Policy

Last updated: 17 August 2026

This policy explains what personal data New CV Tool collects, why, how it is used and protected, and the rights you have over it. New CV Tool is operated by Feraz Zeid, trading as Swiss Digital (“we”, “us”), the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and equivalent data-protection law.

1. Data we collect

  • Account data — your email address and a securely hashed password (handled by our authentication provider; we never see your plaintext password).
  • Profile & CV content you provide — career history, skills, education, languages, aspirations, photo, and any documents you upload. You decide what to enter.
  • Generated content — the tailored CVs and cover letters you create, plus the job descriptions you paste in to tailor against.
  • Usage data — records of AI generation calls (model used, token counts, timestamps) used to enforce fair-use limits and operate your subscription.
  • Billing data — your subscription status and a payment-provider customer reference. Card details are entered directly with our payment processor; we never receive or store your full card number.
  • Technical data — basic server logs, a session token stored in your browser to keep you signed in, and for sponsored anonymous CV imports a salted one-way hash of the network address plus token counts used for rate limiting and cost metering.
  • Product & error events — a first-party record of which steps happen in the product (for example: a generation started, a download finished, the upgrade page opened) and reports of errors your browser hits, including the error message and a technical stack trace. Each record carries the page path, your browser’s user-agent string, the interface language, a random identifier that exists only for the current page view, and — if you are signed in — your account identifier. No cookie is used, nothing is stored on your device, and none of it follows you to other websites.
  • Feedback you send us — the message and category you submit through the in-app feedback form, together with the email address on your account so we can reply.

2. How we use your data

  • To provide the service: store your profile and generate tailored CVs and cover letters.
  • To operate your account and subscription, and to enforce fair-use limits.
  • To keep the service secure and to diagnose and fix problems.
  • To see which parts of the product people actually reach and where they fail, so we can repair and improve them.
  • To read and answer feedback you choose to send us.
  • To contact you about essential service or account matters.

3. Legal bases for processing

We process your data to perform our contract with you (providing the service you signed up for), to pursue our legitimate interests (security, abuse prevention, improving the service), and to comply with legal obligations (e.g. accounting). Where we rely on consent, you may withdraw it at any time.

4. AI processing of your content

When you ask New CV Tool to parse a CV, analyse a job description, revise text or generate application documents with built-in AI, the information needed for that action is sent to OpenAI through its API. OpenAI states that API data is not used to train or improve its models unless the API customer explicitly opts in. Under OpenAI’s default data controls, abuse-monitoring logs may contain prompts and responses and may be retained for up to 30 days. See OpenAI’s API data-controls documentation. The tool is designed not to invent facts, but you remain responsible for reviewing any output before you use it.

4a. Anonymous workspace and sponsored CV import

Manual work in the anonymous workspace is held in your browser’s local storage and can disappear if you clear your browser data. If you choose automatic CV import, the text extracted from the file — or the text you paste — is sent to our server and OpenAI for that parsing action. New CV Tool does not save the raw CV text in its database. It records only a salted one-way network-address hash and token counts for the daily limit and cost meter; OpenAI’s retention terms described above still apply. The interface discloses this processing before you select or submit the CV. If you copy content into ChatGPT, Claude or another external chat yourself, that separate transfer is governed by the provider and account you chose.

5. Sub-processors & third parties

We share data only with the service providers needed to run New CV Tool:

  • Supabase — database, authentication, and file storage (privacy policy).
  • OpenAI — AI parsing, analysis, revision, and generation requested through the built-in workflow (privacy policy).
  • Stripe — subscription billing and payment processing (privacy policy).
  • Google (Tag Manager / Analytics) — optional, consent-gated site analytics — only after you accept via the cookie banner (privacy policy).

We do not sell your personal data, and we do not use it for third-party advertising.

6. Cookies & local storage

By default New CV Tool uses only strictly necessary storage: a session token and your local preferences, kept so you stay signed in and the app works. A presentation-only cookie shares your chosen interface language and signed-in/avatar hint between the marketing site and app; it contains no access or refresh token and grants no account access. Site analytics (Google Tag Manager / Analytics) run only if you consent via the cookie banner — declining changes nothing about how the product works. We use no advertising cookies. Our payment processor may set cookies that are necessary to complete checkout.

The product and error events described in section 1 are recorded on our own servers. They set no cookie and write nothing to your device, so they sit outside the cookie banner; we rely on our legitimate interest in operating, securing and improving the service, and you may object at any time by writing to [email protected]. Google Tag Manager and Analytics remain consent-gated as described above, and declining them does not stop the product from working.

7. International transfers

Our providers may process data outside your country, including in the United States. Where that happens, transfers are covered by appropriate safeguards (such as the EU Standard Contractual Clauses) operated by those providers.

8. Data retention & deletion

We keep your data for as long as your account exists. You can permanently delete your account at any time from Account → Danger zone → Delete account inside the app. This removes your profile, saved drafts, uploaded documents, and usage history, cancels any active subscription, and deletes your login — across our database and file storage. Some records we are legally required to keep (e.g. invoices held by our payment processor) are retained for the statutory period.

Deleting your account also removes the product and error events linked to it and any feedback you sent. Events recorded while you were signed out are not linked to any account and are deleted automatically twelve months after they were recorded.

9. Your rights

Under the GDPR and similar laws you have the right to:

  • access the personal data we hold about you;
  • correct inaccurate data (edit it directly in the app);
  • erase your data (delete your account, as above);
  • export / port your data;
  • object to or restrict certain processing;
  • lodge a complaint with your local data-protection authority.

To exercise any right you cannot action in-app, contact us at [email protected].

10. Security

Data is encrypted in transit, access is restricted, and each account’s data is isolated so users can only reach their own. No system is perfectly secure, but we take reasonable measures to protect your information.

11. Children

New CV Tool is not directed at children under 16 and we do not knowingly collect their data.

12. Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by the “last updated” date above and, where appropriate, communicated to you.

13. Job Collector browser extension

The Job Collector Chrome extension is a companion to New CV Tool. Its data practices differ from the web app and are summarised here:

  • What it does: you sign in with your New CV Tool account, and when you click “Send job” on a job posting, it reads the job text from that tab and saves it to your account, ready to tailor.
  • What it stores on your device: your New CV Tool sign-in session, held in chrome.storage.local to keep you signed in between uses.
  • What it transmits, and where: your login credentials and the job text you choose to save are sent over an encrypted connection to your own New CV Tool account (our Supabase backend) — and nowhere else. It is the same data, going to the same place, as when you use the web app directly. The extension is not sold or shared with any third party.
  • When it runs: only on the tab you are viewing, and only when you click the extension. It does not run in the background on the pages you browse.

14. Contact

Feraz Zeid, trading as Swiss Digital
Rue de l’Aubépine 24
1205 Genève
Switzerland
[email protected]

Privacy Policy — New CV Tool