Privacy Policy

Last updated: March 24, 2026

EasyCV.ai ("we", "us") is operated by Juliano Majally, Entrepreneur individuel, SIRET 924 136 823 00037, 11 Rue Alexis Mossa, 06000 Nice, France.

We are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR/RGPD) and French data protection law (Loi Informatique et Libertés).

1. Data We Collect

1.1 CV Data (stored locally in your browser)

Your CV content (name, email, phone, address, work experience, education, skills, languages, photo) is stored exclusively in your browser's localStorage. This data never leaves your device except when you use AI features (see section 1.3).

1.2 Account Data (server-side)

• Account identifier — a unique ID for your account
• Email address — used to sign in via a secure magic link and to identify your account
• Access status — for individuals, your pass type and expiry date; for organization members, your organization's shared credit-pool balance

This data is stored in our Supabase database (hosted in the EU).

1.3 Data Sent to AI Services

When you use AI features (enhance, review, tailor, ATS score, cover letter, etc.), relevant portions of your CV are sent to Anthropic (Claude API) for processing. Anthropic does not use your data for training. See Anthropic's privacy policy.

1.4 Payment Data

Payments are processed by Stripe. We never see or store your card details. See Stripe's privacy policy.

1.5 Analytics Data (with your consent)

If you accept cookies, we collect anonymous usage data through:

• PostHog — pageviews, feature usage (EU-hosted)
• Google Analytics 4 — traffic and engagement metrics
• Vercel Analytics — performance metrics (first-party, always active)

PostHog and Google Analytics are only activated if you accept cookies via the consent banner. You can change your choice at any time by clearing your browser's localStorage (key: easycv_cookie_consent).

2. Why We Process Your Data

3. Data Sharing

We share data only with the following processors:

Transfers to the United States are governed by Standard Contractual Clauses (SCCs) as required by the GDPR.

4. Data Retention

• CV data — stored in your browser only; deleted when you clear your localStorage or browser data
• Account data (UUID, email, pass status or organization credit-pool balance) — retained until you request deletion
• Payment records — retained for 10 years (French accounting obligations)
• Analytics data — anonymized; retained per provider's policies

5. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Withdraw consent for analytics at any time
• Object to processing based on legitimate interest
• Lodge a complaint with the CNIL (cnil.fr)

To exercise your rights, email us at contact@easycv.ai. We will respond within 30 days.

6. Cookies

Essential (always active)

• localStorage — stores your CV data, preferences, consent choice. Not a cookie, but local storage.

Analytics (with consent only)

• PostHog — anonymous usage tracking
• Google Analytics (_ga, _gid) — traffic analysis

Third-party

• Stripe — fraud prevention cookies during checkout

7. Security

We implement appropriate technical measures to protect your data: HTTPS encryption, secure API keys, Supabase Row-Level Security, and Stripe PCI-DSS compliance for payments.

8. Children

EasyCV.ai is available to users aged 16 and older. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us at contact@easycv.ai.

9. Changes

We may update this policy from time to time. Significant changes will be communicated via a notice on the site. The date at the top indicates the latest revision.

10. Contact

Juliano Majally
11 Rue Alexis Mossa, 06000 Nice, France
contact@easycv.ai