Last modified and published: [5 May 2025]
1. Controller Information
CVtruth is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our community platform to share and receive feedback on your CV and job application materials.
CVtruth is an independent community platform where individuals voluntarily share their CVs and job application materials to receive feedback from other private individuals. We do not operate as a recruitment firm, staffing agency, or job placement service. For questions or concerns about your data, please contact us at welcome@cvtruth.com
2. Scope of this Policy
This Privacy Policy applies to all users of the CVtruth platform, including visitors, service users, and peer reviewers. It covers how we process personal data when you interact with our website, services, and community features.
3. Nature of the Platform
CVtruth is a peer-based community platform. You voluntarily submit your CV and related job application materials in order to receive feedback from other approved private individuals. These reviewers are not affiliated with recruiters, companies, or employers.
4. Personal Data We Collect
We may collect and process the following types of data:
• User Profile Information: name, email address and country
• CV and Application Materials: content of your uploaded CV or related data and documents
• Interaction Data: comments, messages or feedback provided in the community
• Technical Information: IP address, browser type, operating system, referring URLs
• Payment Information: processed by Stripe (see Section 5)
• Usage and Analytics Data: via cookies and tracking tools (see Section 12)
5. Recipients of Personal Data
We only share your personal data in the following cases:
• Peer Reviewers: Your CV and job-related information may be shared only with approved private individuals who have registered as reviewers. Your personal data, including your uploaded CV and profile information, may be shared only with approved private individuals within the CVtruth community who voluntarily offer CV reviews. These individuals receive your information solely to provide feedback on your CV or job application materials. To protect privacy and maintain impartiality, reviewer identities are anonymized. CVtruth does not disclose reviewer names or contact details to users submitting CVs for review.
• Payment Processing (Stripe): If you make a payment for community fees, your data is processed by Stripe, Inc.. We do not store or access your card or banking information. Stripe collects this information independently in accordance with its Privacy Policy.
• Third-party Service Providers: We work with hosting, analytics, email, and support providers who process data on our behalf under strict data processing agreements. These providers may not use your data for their own purposes.
6. Legal Basis for Processing
We process your personal data on the following legal bases under GDPR:
• Consent: For data you voluntarily provide (e.g., uploading your CV)
• Contract: To deliver our services to you
• Legitimate Interest: For platform improvement, security, and community moderation
• Legal Obligation: Where required by law (e.g., accounting, fraud prevention)
7. Your Rights
Under the GDPR (and where applicable, the CCPA), you have the following rights:
• Right to access your data
• Right to rectify inaccurate or incomplete data
• Right to erase your data (“right to be forgotten”)
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
To exercise any of these rights, contact: welcome@cvtruth.com
8. Data Retention
• CVs and job materials are stored until the review process is completed, or you request to delete them.
• User profile data is retained until you request erasure.
• Technical logs and analytics data are retained for up to 12 months for security and improvement purposes unless longer storage is legally required.
• Payment data (processed via Stripe) is retained in accordance with accounting and tax laws.
9. Data Transfers
Your data may be transferred to third-party providers located outside the European Economic Area (EEA), such as in the United States. In such cases, we ensure appropriate safeguards are in place, including:
• EU Standard Contractual Clauses
• Data Processing Agreements
• Vendor privacy certifications (e.g., Stripe, Hotjar, Smartsupp)
10. Security Measures
We implement technical and organizational measures to protect your data, including:
• HTTPS encryption
• Secure hosting with access control
• Encrypted storage for user data
• Access restricted to authorized personnel only
However, no system is 100% secure. We recommend you avoid submitting sensitive personal information unless necessary.
11. Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect data from children.
12. Cookies and Other Tools
We use cookies and similar technologies to operate and improve our website. These include:
a) Essential Cookies Necessary for website functionality (e.g., session management)
b) Analytics Cookies used to understand how users interact with our website. You can manage cookie settings in your browser and withdraw consent at any time.
c) Other Tools:
• Hotjar: We use Hotjar for behavior analytics, including heatmaps and session recordings. Hotjar collects pseudonymized data such as clicks, browser type, and country. You can opt out of Hotjar at: https://www.hotjar.com/policies/do-not-track/
• Smartsupp Communication Tools: We use Smartsupp as a live chat tool. It may collect user interaction data and IP address to facilitate support. See Smartsupp’s Privacy Policy at https://help.smartsupp.com/en_US/privacy/
13. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in the platform or legal obligations. The latest version will always be available on our website with the effective date listed above. We recommend checking back periodically.