Privacy policy

This policy explains to users of the CV Boost site, published by TALVORY LLC, how their personal data is collected, processed and protected, in accordance with applicable regulations including the General Data Protection Regulation (GDPR).

We collect only the data strictly needed to run the Service:

• Identity and contact: first name, last name, email address, phone number.
• Documents and background: uploaded CV files and all the content extracted from them.
• Profile photo: if the user chooses to add one.
• Usage: IP address, browser type, pages viewed, quota tracking.
• AI Coach: sign-in email, purchase and access rights, sessions, conversation text and feedback needed to track progress. Voice may be sent temporarily to the AI provider for the interview; CV Boost does not keep an audio file.
• Refund request: session screenshots and job-application rejection emails voluntarily sent to claim the guarantee.
• Application log: company, role, date, stage, reason for rejection and attachment (screenshot or PDF of the rejection email), added voluntarily by the user in their account. They serve as evidence for the guarantee and to prepare the next interviews; attachments are kept in private storage that only the user can access.
• Follow-up emails: if the user ticks the box offered at download, their email address, first name, last name, language and the date of consent.
• CV Boost pass: email address entered at payment and payment references.
• Downloaded CV: at each download, the content of the CV without contact details (job title, summary, experience, education, skills, languages), the chosen template and the language, linked to the CV import.
• LinkedIn profile: when the user opens the LinkedIn tab, the content of their CV without contact details (job title, summary, experience, education, skills, languages), its language and the generated texts (headline, About section, experience, skills, posts, recommendation request message), linked to the CV import and, with the pass, to the payment email address.
• CV saved online: if the user asks for it and ticks the box provided, their full CV (including contact details and photo), the chosen template and the date of their consent, linked to their account (sign-in email address).

• Running the Service: extracting, analysing and rewriting data through artificial intelligence models to produce the improved CV.
• User management: tracking paid access (CV Boost Plus subscription, passes and AI Coach packs already purchased) and usage limits that prevent abuse.
• Improving the service: anonymised analysis of usage.
• AI Coach: provide interviews, show progress, manage the pack and verify refund requests. TALVORY LLC does not use interview content to train an AI model.
• Follow-up emails: with the user's consent, sending their CV, then at most one email a day for 7 days (job search tips and a presentation of CV Boost Plus, never a sales pitch to a subscriber). With extended consent, 10 more emails are sent on day 22 and every 7 days through day 85 to ask whether the user has found a job, share a tip and present CV Boost Plus. Every email has a one-click unsubscribe link; users can also report finding a job to stop follow-ups.
• Daily job offers: if the user ticks the box provided, we email them, daily or weekly as they choose, up to 5 new job offers selected from the CV saved in their account. The IP address and browser used when signing up are passed to the Careerjet job search engine, which requires them for every search. Every email has a one-click unsubscribe link.
• CV statistics: measuring which paths, templates and CV contents are used, to improve the Service, without name, email address or phone number.
• LinkedIn profile: writing the texts to copy into LinkedIn and showing them again without a new calculation, including on another device. CV Boost publishes nothing on LinkedIn.
• CV saved online: letting the user find and edit their CV on all their devices; every change is saved there automatically.

Resume follow-up: when you enter your email address on the payment screen without paying, CV Boost keeps your resume to send it back to you, and writes to you at most three times over seven days (your resume, job offers for your job title and city, a reserved offer). Unsubscribe in one click in every email.

• Artificial intelligence providers: the contents of your CV are sent to their interfaces for processing. These providers are contractually bound not to use your personal data to train their models.
• Hosting: secure storage of data and source code.

We never sell your personal data for third-party marketing.

For the AI Coach, Supabase provides authentication and storage, Stripe processes payments, Resend delivers sign-in codes, and Google Gemini processes the exchanges needed for the interview. These exchanges may be processed outside the user's country of residence. The AI provider may retain security logs temporarily under its own terms.

Resend also delivers the CV sent by email and the follow-up emails; Stripe processes the pass payment.

Job offers: when you search for offers after your CV, the job, city and distance you choose are sent to the job service for your country (France Travail in France; Careerjet in more than 80 countries). For Careerjet, which requires it, the IP address and browser type of the device are also sent, through a relay server that does not keep these searches. Your name and contact details are never sent. When you click an offer, you leave CV Boost for the advertiser's site, which has its own rules.

For the CV Boost Plus subscription, Stripe receives the email address and processes payments and invoices; Resend delivers subscription emails (sign-in codes, pre-charge reminder, confirmations).

For the CV saved online, Supabase handles sign-in and storage, and Resend delivers the sign-in code.

While you type a city, suggestions come from Photon (komoot, based on OpenStreetMap data): only the text typed is sent to it, by our server, without your IP address.

Your documents and the CVs produced are kept temporarily so you can download them, then deleted automatically once no longer needed, normally 30 days after creation. The quota identifier (an encrypted email address) may be kept longer solely to verify fair use.

AI Coach conversation text, feedback and application log remain linked to the account during pack access, for no more than six months after purchase, and are then deleted within 30 days. Users may request earlier account deletion in “My space”. Data needed for a refund, dispute or accounting duties may be retained separately for the period required by applicable law. Account-linked progress data is not anonymous while the account can identify the user.

Follow-up email data is deleted no later than 30 days after consent for the initial series, or 100 days after consent for the extended series. Sending stops upon unsubscription or when the user reports finding a job. Pass payment references are kept for the legally applicable period.

The downloaded CV, stored without contact details, is kept for 12 months after its creation; its content is then automatically deleted and only usage data (template, language, date) remains. The User may request earlier deletion by writing to contact@cv-boost.app.

The CV without contact details and the generated LinkedIn profile are kept for 12 months after their last update, then deleted automatically. The user can ask for earlier deletion by writing to contact@cv-boost.app.

Subscription data (email address, plan, status and dates) is kept during the subscription and for 3 years after it ends; invoices are kept by Stripe according to accounting obligations. Sign-in codes sent by email are deleted after 24 hours.

The CV saved online is kept as long as the user uses it, then deleted automatically 12 months after its last change. The user can delete it at any time from the “My online CV” page.

The resume kept for the follow-up is stored for one year at most, then deleted; it is deleted immediately upon unsubscribing. The daily job offers sign-up is kept until the user unsubscribes or deletes their account; the IP address and browser are deleted upon unsubscribing; the list of offers sent is deleted after 90 days.

TALVORY LLC protects the security and confidentiality of your data through appropriate technical measures (encrypted transmission, secured databases), to prevent destruction, loss, alteration or unauthorised disclosure.

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. To exercise any of these rights, write to us at contact@cv-boost.app. We undertake to handle your request promptly.

CV Boost uses items strictly necessary for the site to work (your CV draft, preferences), stored in your browser.

CV Boost also measures its audience with its own tool, without any third-party service: a random identifier, kept for 13 months in your browser, counts the steps completed (screen viewed, template chosen, CV downloaded…). This measurement is anonymous: it contains neither your name, email, phone number nor the content of your CV, and is never linked to your contact details. It is used only to produce aggregated statistics to improve the Service, and the data is deleted after 13 months. You can opt out at any time by refusing cookies in the dedicated banner.