Privacy Policy

The short version

You give us your career story — by recording it, importing a CV, or typing it in. We store it, use AI to help structure it into a CV, and let you export or publish it. That's the whole business — we don't sell your data, share it with advertisers, or use it to train any AI model. You can see and correct everything an AI generates before it's ever saved.

Who's responsible for your data

Smart CV Writer (operated via insightlab.be) is the data controller for the personal data described here. Questions or requests: welcome@smartcvwriter.com — a person reads every message.

What we collect

• Account data — name, email, and password (handled by Amazon Cognito; we never see your raw password).
• Your career data — work experience, education, skills, certifications, interests, referees, and the personal details you choose to add (phone, city, address, date of birth, LinkedIn, a profile photo).
• What you send us to build that data — voice recordings (converted to text, then deleted — see below) and any CV file you upload.
• Billing status — whether you're on a paid plan. We don't store payment card details ourselves; that's handled by our payment processor when billing goes live.

Why we process it, and on what basis

Everything above exists to provide the service you're using: turning your career story into a CV you can review, export, and optionally publish. That's performance of our contract with you — you sign up specifically for this. Account security and abuse prevention (e.g. the free-tier limits) rely on our legitimate interest in keeping the service usable and fair. We don't process your data for marketing or profiling.

How AI is involved

Voice recordings and imported CVs are sent to an AI model to turn them into structured profile data and a written summary. This is core to what the service does, not an optional add-on — but nothing an AI generates is saved or used until you've reviewed and corrected it. Full detail on exactly where AI touches your data: How we use AI.

Where your data lives

All processing and storage runs on Amazon Web Services infrastructure in the EU (Paris, eu-west-3) — chosen specifically to keep your data inside the EU. The AWS services involved: Cognito (accounts), DynamoDB (your CV data), S3 (temporary voice recordings), Bedrock (AI processing), Transcribe (speech-to-text), and SES (account emails). These are all sub-processors acting on our instructions, not independent users of your data.

How long we keep it

• Voice recordings — deleted automatically within 24 hours of upload. Only the text transcript is kept.
• Your CV data — kept for as long as your account is active. You can already delete individual entries (an experience, a skill, a whole recorded job) yourself, any time.
• Full account deletion — a self-service "delete my account" option isn't built yet. Until it is, email us and we'll delete your account and all associated data by hand.

Your rights

Under GDPR, you can ask us to:

• Access a copy of your data — the Publish page already gives you this yourself, anytime, in full.
• Correct anything inaccurate — every field in your profile is editable directly.
• Delete your data — see above; self-service for individual items today, by email for full account deletion.
• Export your data in a portable format — again, the Publish page does this directly.
• Object to or restrict processing, or withdraw consent where we rely on it.

To exercise any of these, email welcome@smartcvwriter.com. You also have the right to lodge a complaint with your local data protection authority.

Cookies and analytics

We use essential cookies to keep you logged in — the service doesn't work without these. On our public marketing pages, we may also use Google Analytics to understand traffic at a high level; this doesn't run on any page where you're logged in or entering CV data.

Who else sees your data

Nobody, beyond the AWS sub-processors listed above who process it on our behalf. We don't sell your data, share it with advertisers, or hand it to third parties for their own purposes. If you choose to publish your CV to a public URL, that page is visible to anyone with the link, for as long as you keep it published — that's the one case where your data is intentionally public, and it's entirely your choice.

Children's privacy

Smart CV Writer isn't intended for anyone under 16, and we don't knowingly collect data from children.

Changes to this policy

If we make a material change, we'll email you and update the date at the top of this page.

Questions

Write to welcome@smartcvwriter.com — a person reads every message.