Privacy Policy

Data Controller

The data controller responsible for your personal data is:

• MB "VP Solutions"
• Company code: 307570995
• Registered address: Vilkpėdės g. 22, Vilnius LT-03151, Lithuania
• Email: [email protected]
• Phone: +370 632 05883

What Data We Collect

We collect the following categories of personal data:

• Account data — your name, email address, and profile picture, received from Google when you sign in.
• Resume content — the information you add to your resumes (such as work experience, education, certifications, contact details, and photo). This may include personal data about other people, such as referees, that you choose to include — you are responsible for having a lawful basis to add it.
• Payment data — when you subscribe to a paid plan, your name and email are shared with our payment provider. Card details are handled directly by the provider and are never stored on our servers.
• Usage and analytics data — anonymized information about how you use the application, such as page views and feature usage.
• Technical data — basic technical information such as browser type and device information, used to operate and secure the service.

How We Use Your Data

We use your personal data to:

• provide, maintain, and operate the resume builder and your account;
• authenticate you and keep your session secure;
• process payments and manage your subscription;
• provide AI-powered features when you choose to use them;
• understand and improve how the service is used;
• communicate with you about your account and service-related matters;
• protect the service against fraud, abuse, and security threats;
• comply with our legal obligations.

How Your Data Is Stored

Your data is stored securely in a PostgreSQL database. Files such as profile pictures and resume attachments are stored in S3-compatible object storage. All data is hosted on infrastructure we control.

Data Security

We take appropriate technical and organizational measures to protect your personal data. Data is transmitted over encrypted (HTTPS) connections, access to systems is restricted, and we follow industry-standard practices to safeguard your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR: performance of a contract (to provide the resume builder and your account), your consent (for optional analytics cookies and when you choose to use AI features), and our legitimate interests (to keep the service secure and to improve it).

Data Retention

We retain your account and resume data for as long as your account is active. When you delete your account, your personal data and resumes are deleted, except where we are required to retain certain information to comply with legal obligations.

Cookies

We use session cookies to keep you signed in. These cookies are essential for the application to function and are not used for advertising purposes. We also use analytics cookies from PostHog to understand how the application is used. Analytics cookies are optional and can be controlled via the cookie consent banner.

Third-Party Services

We use the following third-party services to operate the application. We do not sell your personal data to any third parties.

• Google OAuth — We use Google OAuth for authentication. When you sign in with Google, your authentication is handled by Google's servers according to their privacy policy.
• Polar.sh — We use Polar.sh for subscription billing and payment processing. Your email address and name are shared with Polar to create a customer account. Payment information is handled directly by Polar and its payment processor (Stripe) and is never stored on our servers.
• PostHog — We use PostHog for product analytics to understand how the application is used and to improve the experience. PostHog collects anonymous usage data such as page views, feature usage, and device information. IP addresses are anonymized. You can opt out of analytics tracking via the cookie consent banner.
• AI Providers (OpenAI, Anthropic, Google Gemini, Ollama) — If you use AI-powered features, your resume content may be sent to the AI provider you select for processing. Each provider handles your data according to their own privacy policy. You choose which provider to use, and data is only sent when you actively use an AI feature.

International Data Transfers

Some of the third-party services we use (such as analytics and AI providers) may process your data on servers located outside the European Economic Area. Where this happens, the transfer is subject to appropriate safeguards in line with the data-protection terms of the respective provider.

Automated Decision-Making and AI

We do not make decisions that produce legal or similarly significant effects about you solely by automated means. Our AI-powered features generate suggestions only — you remain in control and are responsible for reviewing and deciding whether to use any AI-generated content. AI features are used only when you actively choose to use them.

Children's Privacy

The service is not directed to children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

Your Rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data — you can delete your account and all associated data at any time from your account settings;
• data portability — you can export your resume data as JSON from within the application;
• restrict or object to certain processing, and withdraw consent at any time.

To exercise any of these rights, contact us at the email below. You also have the right to lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania if you believe your data has been handled unlawfully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the service after the changes take effect constitutes acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy, please reach out to us at [email protected].