1. Who is responsible for your data
Flippico sp. z o.o., Poland, tax identification number (NIP) 9671443189, operates CVer and is the controller of personal data processed to provide the service. Contact us about privacy or your rights at contact@cver.work.
2. Data we process
Account data includes your email address, account identifiers, sign-in information and preferences. When you use the service, we process the CVs and other files you upload, extracted text, employment and education history, skills, job preferences, saved offers, applications, AI conversations and generated documents.
If you enable mailbox features, we process mailbox connection details, email addresses, message contents and associated recruitment information, including interview dates and meeting links. Telegram features use the connection details you provide to deliver notifications. Avoid uploading sensitive information or information about other people unless it is necessary and you are entitled to share it.
We also process subscription and payment status, support correspondence, and technical data needed to operate and protect the service, such as IP addresses, browser information, request records and error logs. Stripe handles payment details through its payment interfaces.
3. Purposes and legal bases
We process data to create and manage your account, analyse CVs, find and match jobs, prepare documents, organise applications and messages, manage interviews, provide enabled integrations and administer subscriptions. Where the GDPR applies, the legal basis is performance of our contract with you or steps you request before entering a contract (Article 6(1)(b)).
We process data for service security, abuse prevention, troubleshooting and handling enquiries on the basis of our legitimate interests (Article 6(1)(f)), taking your rights into account. Accounting and other legally required records are processed to comply with legal obligations (Article 6(1)(c)). Where processing requires consent, we request it separately and you may withdraw it at any time without affecting the lawfulness of earlier processing.
4. AI and document processing
Account-based features may send relevant CV text, documents, job descriptions, messages or prompts to the AI and document-processing providers used for that feature. CVer uses automated analysis to suggest job matches, prepare CV content and identify recruitment updates and interviews. These outputs can be incomplete or inaccurate; review them before relying on them.
CVer assists your job search; it does not make employers’ hiring decisions. You can change your preferences and review generated content. The free CV tools labelled as running in your browser process your input locally rather than uploading that input to CVer servers; this differs from uploading a CV to your account.
5. Who receives data
Data is processed by service providers supporting hosting, database and file storage, authentication, AI, document extraction, email delivery and payments. These include Supabase for application data, Flippico’s Amadeus authentication service, Microsoft Azure for document extraction, and Stripe when paid subscriptions are enabled. The AI and email providers involved depend on the feature and service configuration.
When you send an application or message, the recipient receives the information included in it. If you enable Telegram notifications, notification content is transmitted through Telegram. Employers, job boards and external services may act as independent controllers under their own privacy policies. We may also disclose data where legally required or necessary to establish, exercise or defend legal claims.
6. International processing
Depending on the providers used, personal data may be processed outside your country, including outside the European Economic Area. Where GDPR transfer rules apply, transfers require an appropriate legal mechanism, such as an adequacy decision or standard contractual clauses and any necessary supplementary measures. Contact us for information about the destinations and safeguards relevant to your data.
7. Cookies and browser storage
CVer uses the cver_session cookie for sign-in. The cver_locale and cver_country cookies remember language and market preferences for up to one year. The cver-landing-theme local-storage entry remembers your chosen landing-page theme until you clear or change it. Authentication and security features may also use storage needed for their operation.
You can clear or restrict cookies and local storage in your browser, although this may prevent sign-in or reset preferences. Any non-essential tracking that requires consent must be presented separately before it is enabled.
8. Retention and deletion
We keep account content while it is needed to provide the service. You can delete CVs or request account deletion using the available account controls or by contacting us. Disconnecting an integration stops its future use but does not necessarily delete information already imported into your account.
Some information may need to remain after deletion to meet accounting and legal obligations, resolve disputes or protect against abuse. Retention depends on the type of record and the applicable obligation or limitation period. Backups and records held by independent providers may follow separate retention cycles. Contact us for retention information about a particular record.
9. Your rights
Where applicable, you may request access to your personal data, correction, erasure, restriction of processing and portability. You may object to processing based on legitimate interests and withdraw consent for consent-based processing. These rights are subject to the conditions and exceptions in applicable law.
Email contact@cver.work to make a request. We may need to verify your identity and will normally respond within one month under the GDPR, or explain any permitted extension. You may complain to your local data-protection authority; in Poland this is the President of the Personal Data Protection Office (UODO), uodo.gov.pl.
10. Security and changes
We use access controls and other technical and organisational measures to protect personal data. No online service can guarantee complete security. Protect your account and tell us promptly if you suspect unauthorised access.
We may update this policy as the service or legal requirements change. The date below identifies this version. Material changes will be communicated through appropriate service channels.
Questions? contact@cver.work