Privacy policy

Controller

The controller is the CV Launch operator identified in the imprint. Privacy requests can be sent to the contact route provided on this website.

Visiting the website

The hosting provider processes technical connection data such as IP address, time, requested page and browser information to deliver and protect the website. The legal basis is the legitimate interest in secure and reliable operation under Article 6(1)(f) GDPR. Server logs are retained only as long as required for security and operation.

Project brief and contact

When you send a project brief, CV Launch processes the contact details, career information, links, message and any CV file you choose to upload. This is needed to review your request, prepare an offer and perform a requested service under Article 6(1)(b) GDPR.

Please do not submit information that is not relevant to a professional application. Briefs that do not become a project are deleted when they are no longer needed for follow-up. Project and invoice records are retained for applicable contractual, tax and accounting periods. CV material is not sold or used to train public AI models.

Account and client portal

Clerk provides account authentication and processes the identifiers, email address, authentication events and essential session data required to sign you in securely. The portal stores project status, messages and files so the requested service can be managed and delivered. Portal information is available only to the signed-in client assigned to that project and the authorised CV Launch owner account.

Service providers

Vercel hosts the website and private file storage, Neon provides the project database, Clerk provides authentication, and Resend delivers transactional emails. Stripe will process payment details only after checkout is enabled. Each provider receives only the data required for its task. Payment card details are not stored by CV Launch.

Where a provider processes data outside the EEA, CV Launch relies on the safeguards offered for that service, such as an adequacy decision or standard contractual clauses, and documents the relevant processor terms.

Cookies and tracking

The public marketing pages use no advertising or analytics cookies. Essential authentication and security cookies are used when you sign in or access the client portal. They are required to provide the requested account function and are not used for advertising. No consent banner is shown because no optional tracking is currently active.

Access and security

Project pages require authentication. Uploaded files are stored privately, file downloads are authorised again on the server, and admin access is limited to the verified owner email. Private pages are marked not to be indexed or cached. No system can promise absolute security, but access is limited according to the purpose of the service.

Your rights

You may request access, correction, deletion, restriction, portability or object to processing where the legal requirements apply. You may also lodge a complaint with the Austrian Data Protection Authority.