Privacy policy
Last updated: 22 October 2026
This policy explains how AlderCV ("we") processes personal data when you use AlderCV. We are the data controller. We wrote it to be read, not skimmed past: if something is unclear, write to support@aldercv.com.
Summary
- Your resume content is used only to provide the Service. It is never sold, never used for advertising, never sent to analytics tools and never used to train AI models.
- You can export all your data and delete your account at any time from your account settings.
- We use a small number of carefully chosen processors, listed below.
Data we process
| Data | Purpose | Legal basis (GDPR / KVKK) |
|---|---|---|
| Account data: name, email, password hash, interface language, country (from your connection) | Creating and securing your account, regional defaults | Contract |
| Resume content and photos you add | Storing, previewing and generating your PDFs | Contract |
| Purchase and subscription status (via Polar) | Providing paid plans, invoices, refunds | Contract, legal obligation |
| Technical data: IP address, browser, error reports | Security, abuse prevention, fixing bugs | Legitimate interest |
| Product usage events (e.g. "PDF downloaded", template id) without resume content | Understanding and improving the product | Legitimate interest; consent where required |
| How you first found us, recorded once when your account is new: the page of our site your visit started on (without its query) and the site you came from (its name, such as google.com, not the full address) or the campaign name in the link. The marketing site passes this along in its links and stores nothing on your device for it. | Seeing which pages and sources bring people who use the product, in aggregate | Legitimate interest. Deleted with your account. |
| A student discount application: your university email, school, programme, expected graduation year and the note you add, the date you confirmed the address, and our decision (with the reason, if we decline) | Reviewing your application by hand and, once approved, applying the student discount at checkout for 12 months | Contract (at your request). Deleted with your account and part of your data export. |
| A resume you share as a web page (only when you turn the link on): the resume without hidden parts and, unless you allow it, without email, phone and personal details; how often the link was opened, per day (your own visits and obvious robots are not counted) | Showing your resume to people you give the link to, and showing you the view numbers | Contract (at your request). We do not track the people who open your link: only the daily counts are stored, never their address, browser or anything else about them. |
| A feedback link you create (only when you turn it on): the same copy of your resume as the web page, and the comments people leave through it (the text, the part of the resume it is about and the name they choose to give). To limit abuse we keep a keyed hash of the commenter's network address for 7 days, never the address itself. | Letting people you trust comment on your resume; emailing you about new comments if you keep that on | Contract (at your request). Comments are deleted when you delete them, the resume or your account, and are part of your data export (without the hashes). |
| Job applications you track: company, role, job ad link, stage, dates, next step, notes, and which resume and cover letter you sent | Showing your application board | Contract |
| Invites (the invite program): who invited whom and the friend's steps (address confirmed, first PDF). So that one person is not counted as several friends, the friend's sign-up network address and a keyed hash of their email address are kept with the invite, never the address in readable form. | Giving both of you the Pro days; preventing abuse of the invite program | Contract; legitimate interest for the abuse checks. If the friend deletes their account, the invite stays with the inviter without the friend's name or email (only the hash). |
| Waitlist email | Launch announcements | Consent (you can unsubscribe any time) |
How long we keep data
- Guest sessions that are not linked to an account: last at most 24 hours (they end when the browser closes); their data is deleted within 2 days.
- Resumes in the trash: deleted permanently after 30 days.
- Daily versions of a resume: kept for 14 days. Versions you save under a name: until you delete them.
- Account data and resumes: until you delete them or your account.
- Product analytics linked to your account's internal id: until you delete your account; we then ask PostHog to delete them. The admin log of actions taken on your account (such as a suspension) keeps the action and its date, without your email address or the reasons written about you.
- Comments on your feedback links: until you delete them, the resume or your account. The keyed hash of a commenter's network address: 7 days.
- Invites: as long as the inviter's account. The friend's network address: 90 days. An invite whose friend deleted their account: up to 12 months.
- The network address you signed up from (for the invite program's abuse checks): 90 days.
- Interview prep answers drafted with AI: with the application they belong to, until you delete it or your account.
- Mock interviews (your answers and questions, the AI interviewer's notes and review): with the application they belong to, the last ten per application, until you delete them, the application or your account. A rehearsal left unfinished closes after 24 hours; it is deleted then unless it has answers to at least two questions (its notes can then still be opened).
- Billing records: as long as tax law requires (kept by Polar and us).
- Error reports: up to 90 days. Server logs are kept only up to a fixed size (50 MB) and then overwritten.
- Encrypted backups: the database for 30 days, photos for 7 days. Data you delete leaves the backups when they expire.
Processors
We share data only with service providers who process it on our behalf under data processing agreements:
- Polar (Polar Software Inc., USA; payments, invoicing, tax; merchant of record). As the seller of paid plans, Polar receives the details you enter at checkout and handles them under its own privacy policy; card payments are processed by its payment partner Stripe. We never see your full card details.
- Cloudflare (hosting network, DNS, security, Turnstile bot protection, R2 storage for our encrypted daily backups of the database and photos, privacy-friendly Web Analytics without cookies)
- Resend (transactional email such as password resets, and next-step reminders and feedback notifications if you keep them on)
- PostHog, EU cloud (product analytics without cookies, on the marketing site and in the app; in the app linked to your account's internal id; never receives resume content)
- Sentry (error monitoring; resume content and personal data are removed before sending)
- Anthropic (AI writing help, only when you use an AI feature: the text you ask to improve or proofread; your resume for a profile summary, a cover letter, a LinkedIn profile or interview prep, with the job ad where you give one; the job ad, your resume and what you write in a mock interview; the resume and job ad for a match; the resume you translate; or the text read from a file you import (the file itself never leaves your device). Your name, email, phone, address and links are not sent with the resume; a translation also sends the personal details you added that contain words (such as nationality), and an import the whole text of the file. It is sent for that request and not used to train models; we keep usage counts, not the text, apart from interview prep answers and mock interviews, which are saved with their application.)
- Our hosting provider for the application server and database
Some processors may process data outside the EU/EEA or Turkey. In that case we rely on appropriate safeguards such as the EU Standard Contractual Clauses and, for Turkey, the transfer mechanisms of KVKK Article 9.
Cookies
Neither the marketing site nor the app sets analytics cookies or keeps an analytics identifier on your device: product analytics runs in memory for the page you are on. The app uses a necessary session cookie to keep you signed in, and keeps small preferences (such as dark mode) and unsaved drafts of your documents in your browser.
Your rights
Under the GDPR and Turkey's Personal Data Protection Law No. 6698 (KVKK) you have the right to access, correct, export and delete your data, to object to or restrict certain processing, to withdraw consent, and to complain to a supervisory authority (in Turkey: Kişisel Verileri Koruma Kurumu). Export and deletion are self-service in your account settings; for anything else write to support@aldercv.com. We answer within 30 days.
Security
Data is encrypted in transit. Photos are stored on the disk of our application server; the daily backups of the database and photos are encrypted before they leave it. PDFs are generated on our own servers; the rendering engine only accesses your resume with a short-lived token. Passwords are stored as salted hashes.
Changes
We will announce material changes to this policy by email or in the app before they take effect.