Privacy Policy

This policy explains how PimpThis CV! ("we", "the platform", pimpthiscv.com) processes personal data. It is written to comply with the Swiss Federal Act on Data Protection (revised FADP / nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller and contact

The controller responsible for data processing is the operator of pimpthiscv.com. For any privacy request write to partenzainsalita@gmail.com.

2. Data we process

• Account data: email address, name, login method (email or Google sign in).
• Profile data you enter: phone, location, LinkedIn/GitHub links, career goal, profile photo, personalization instructions, application details.
• CV content: your reference CV, tailored CVs, edits, chat messages and templates.
• Job data: job descriptions and links you paste, job board entries and applications.
• Optional API keys for external AI providers, stored encrypted at rest and used only for your requests.
• Technical data: log data such as IP address, browser and timestamps needed for security and operation.

Please do not include special categories of data (health, religion, ethnicity, etc.) in your CV unless you want them processed. We do not sell personal data and do not use it for advertising.

3. Purposes and legal basis

• Providing the service (creating, tailoring and exporting CVs): performance of a contract (Art. 6(1)(b) GDPR).
• Security, abuse prevention and service improvement: legitimate interest (Art. 6(1)(f) GDPR).
• Legal obligations where applicable (Art. 6(1)(c) GDPR).

4. Where data is stored

Your account and application data is stored in a managed database and file storage hosted in a data centre in Frankfurt, Germany (European Union). Switzerland recognises the EU as offering an adequate level of data protection.

5. AI processing and recipients

To generate and edit CVs, the relevant text (your CV, the job description and your instructions) is sent to third party AI model providers (for example Google, OpenAI, Anthropic or OpenRouter, depending on the selected model). These providers may process data outside Switzerland and the EU, including in the United States. Such transfers rely on adequacy decisions (e.g. the Swiss‑US / EU‑US Data Privacy Framework) or Standard Contractual Clauses. Our hosting and infrastructure providers act as processors on our behalf. If you use your own API key, the provider's own terms apply to that processing.

6. Retention

We keep your data while your account exists. When you delete your account, all personal data is removed immediately from the active database; backups are overwritten within a short rotation period. We keep only a minimal record (email and date) that a deletion took place.

7. Your rights

You have the right to access, rectify, delete and receive a copy of your data, to object to or restrict processing, and to withdraw consent. You can delete your account and all your data at any time with the Delete my account button on your Profile page. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with your local EU supervisory authority.

8. Cookies

We use only technically necessary browser storage to keep you signed in and to save drafts. No tracking or advertising cookies are used.

9. Security

Data is transferred over encrypted connections (HTTPS) and protected by access controls so each user can only access their own data.

10. Changes

We may update this policy. The current version is always published on this page.