cvrious logocvrious

Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

Philipp Stürner
Sole proprietorship (Einzelunternehmen)

Kaiserstraße 41

60329 Frankfurt am Main

Germany

Email: philipp@cvrious.com

2. General Information

We process personal data in accordance with the GDPR and applicable German data protection laws.

This Privacy Policy explains the nature, scope, and purpose of personal data processing.

3. User Accounts

Processed data:

  • Email address
  • Password (hashed)

Purpose:
Account creation and authentication.

Legal basis:
Art. 6(1)(b) GDPR

4. CV Processing

Users may upload CVs or import LinkedIn data.

Key points:

  • CV files are not permanently stored
  • Processing occurs temporarily in memory
  • Content is transmitted to OpenAI for extraction
  • Raw files are discarded immediately after processing

Processed data:

  • CV content (textual information)

Purpose:
Creation of AI-based chatbots.

Legal basis:
Art. 6(1)(b) GDPR
Art. 6(1)(a) GDPR (consent where sensitive data is included)

5. Chatbot and Chat History

Chatbots are based on:

  • Extracted CV information
  • User-selected prompts
  • Stored chat messages

Chat histories are stored until deleted by the User.

Legal basis:
Art. 6(1)(b) GDPR

6. Use of OpenAI

We use the OpenAI API (Completions).

Recipient:
OpenAI, L.L.C., USA

  • Data is used solely to provide AI functionality
  • Data is not used for model training

Transfers are safeguarded by Standard Contractual Clauses (Art. 46 GDPR).

7. Publicly Accessible Chatbots

Users may publish chatbots via shareable links.

Responsibility for publicly disclosed content lies with the User.

Legal basis:
Art. 6(1)(b) GDPR

8. Payments

Payments are processed via Polar.sh.

We do not receive full payment details.

Legal basis:
Art. 6(1)(b) GDPR

9. Hosting

Hosting and databases are located in Germany.

Processing is carried out under Art. 28 GDPR.

10. Contact

If you contact us by email, we process the data solely to handle your inquiry.

Legal basis:
Art. 6(1)(b) or Art. 6(1)(f) GDPR

11. Retention Period

Personal data is stored only as long as necessary.

Chat histories remain until deleted by the User.

12. Data Subject Rights

You have the right to:

  • Access
  • Rectification
  • Erasure
  • Restriction
  • Data portability
  • Objection
  • Withdrawal of consent

13. Supervisory Authority

You have the right to lodge a complaint with a data protection authority.

14. Changes

We may update this Privacy Policy to reflect legal or technical changes.

cvrious | your story, interactive