← Back

Privacy Policy - iBuildMyCV

Last updated: 6 July 2026

1. Data Controller

The operator of iBuildMyCV is Eytan, based in France (“we”, “us”). Eytan is the data controller for personal data collected through the Service.

  • iBuildMyCV app: https://ibuildmycv.com/
  • Publisher website: https://iloveapps.io/
  • Contact: contact@ibuildmycv.com

For any question about your data, contact us at the email above.

2. Data We Collect

Account data: email address, password (stored encrypted by our authentication provider), sign-in method (email/password or Google), account creation date.

Resume content: information you enter to build your resume (name, contact details, work experience, education, skills, and any other fields you choose). This may include personal data about you and, if you enter them, about third parties (e.g. professional references). You are responsible for obtaining any required consent before including third-party personal data.

Payment data: we do not store card numbers or full payment details. Payments are processed by Dodo Payments (“Dodo Payments”), our Merchant of Record. See Dodo Payments’ Privacy Policy.

Technical data: IP address, browser type, device information, and connection logs, collected for security, fraud prevention, and proper operation of the Service.

3. Purposes of Processing

We use your data to:

  • provide and operate the Service (create, save, edit, and export your resume);
  • manage your account and subscription status;
  • authenticate you (including via Google OAuth, when you choose that option);
  • ensure security and prevent abuse;
  • respond to support requests;
  • comply with legal obligations.

We do not use your data for advertising profiling. We do not send marketing emails unless you have opted in (if such options are offered).

4. Legal Basis (GDPR)

Where the GDPR applies, our processing relies on:

  • performance of a contract (providing the Service you signed up for);
  • legitimate interests (security, service improvement, fraud prevention), balanced against your rights;
  • consent, where required (e.g. optional communications);
  • legal obligation, where applicable.

5. Recipients and Processors

Your data is processed by trusted providers, only for the purposes described above:

| Provider | Role | Location / notes | |----------|------|------------------| | Supabase | Database, authentication, file hosting for account and resume data | Cloud hosting (Western Europe / EU region for our project) | | Dodo Payments | Payment processing, billing, tax, Merchant of Record | See Dodo Payments’ policies | | Google | OAuth sign-in (only if you choose “Continue with Google”) | See Google Privacy Policy | | PostHog | Product analytics (only if you accept analytics cookies) | Hosted in the EU (PostHog Cloud EU). See PostHog Privacy Policy |

We do not sell or rent your personal data to third parties.

6. International Data Transfers

Data may be transferred outside your country (including outside the EU) when processed by Supabase, Dodo Payments, or Google. Analytics data (PostHog) is hosted in the EU. Where required, such transfers rely on appropriate safeguards under GDPR (e.g. Standard Contractual Clauses) or equivalent mechanisms.

7. Data Retention

  • Account and resume data: retained while your account is active.
  • After account deletion request: deleted within 30 days, except where longer retention is required by law (e.g. billing records held by Dodo Payments).
  • Logs and security data: retained for a limited period consistent with security needs.

To request account deletion, use Delete my account in Account settings, or email contact@ibuildmycv.com from your registered email address.

8. Your Rights

Under GDPR (and similar laws), you may have the right to:

  • access and receive a copy of your data;
  • rectify inaccurate data;
  • erase your data (“right to be forgotten”);
  • restrict or object to certain processing;
  • data portability;
  • withdraw consent where processing is based on consent.

To exercise these rights, contact contact@ibuildmycv.com. You may also lodge a complaint with your local supervisory authority (e.g. the CNIL in France).

9. Cookies and Similar Technologies

iBuildMyCV uses essential cookies and local storage required for:

  • keeping you signed in (Supabase session);
  • remembering your language preference;
  • storing your cookie consent choice.

With your consent (via the cookie banner), we also use PostHog to understand how the Service is used (pages visited, sign-up, checkout, feature usage). PostHog may set cookies or use similar technologies; data is hosted in the EU and processed according to PostHog’s privacy policy. We send a pseudonymous user ID (your Supabase account UUID) when you are signed in - not your email. You can change your choice anytime via Cookies in the site footer, or use browser extensions that block analytics.

10. Children

The Service is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

11. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. No method of transmission over the Internet is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified via the Service or by email when appropriate. The “Last updated” date at the top will be revised accordingly.

13. Contact

Eytan - France
contact@ibuildmycv.com

This policy describes how iBuildMyCV handles personal data. It does not replace advice from a qualified legal professional.