Privacy Policy

1. Who we are

CVStreamAI ("we", "us") provides AI-powered CV screening software for recruitment teams. This policy explains how we collect, use, store, and delete personal data under GDPR and similar privacy laws.

2. Data we collect

• Account data: email, company name, plan, billing metadata
• Uploaded CV files and extracted candidate information
• AI screening results, notes, and recruiter activity
• Essential cookies for authentication and security
• Support feedback you submit voluntarily

3. How we use data

We process data to provide the service: parse CVs, generate match scores, export reports, and send transactional emails (e.g. screening complete, password reset). We do not sell candidate or customer data.

AI processing uses Anthropic. Data is stored in Supabase (EU/US regions per your project configuration). You are responsible for having a lawful basis to upload candidate CVs.

4. Your rights (GDPR)

You have the right to:

• Access & export — download your data from Settings → Export My Data
• Rectification — update profile and company details in Settings
• Erasure — delete your account from Settings → Danger Zone
• Restrict or object — contact us to limit processing where applicable
• Complain — to your local data protection authority

5. Retention

We retain account and CV data while your subscription is active. When you delete your account, we remove your profile, jobs, candidates, stored CV files, and auth record. Backups may persist for a limited period per our infrastructure provider.

6. Cookies

We use essential cookies for login sessions, CSRF protection, and cookie consent preferences. You can accept or decline non-essential analytics via the cookie banner.

7. Contact

For privacy requests, email support via our support page.