Privacy Policy

CVFox ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data when you use CVFox (cvfox.app) and its associated services.

By using CVFox, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information you provide directly

• Account data: name, email address, and password when you register.
• CV content: all text, dates, links, and files you enter or upload when building your CV — including work history, education, skills, and contact details.
• Billing data: if you subscribe to a paid plan, payment information is processed by our payment provider (Stripe). We do not store full card numbers.
• Communications: messages you send us via email or support channels.

1.2 Information collected automatically

• Usage data: pages visited, features used, clicks, and session duration.
• Device & browser data: IP address, browser type, operating system, and referring URL.
• Cookies & local storage: we use first-party cookies and localStorage to keep you logged in and remember preferences such as dark mode.

1.3 CV view analytics

When a visitor opens your shared CV link, we record the approximate country of the viewer, the timestamp, and the number of views. This data is visible only to you and is never sold or shared with third parties.

2. How We Use Your Information

• To provide, maintain, and improve the CVFox service.
• To personalise your experience and remember your preferences.
• To send transactional emails (account verification, password reset).
• To send product updates and announcements — you can opt out at any time.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal data to third parties, and we do not use your CV content to train AI models without your explicit consent.

Salary Statistics — Anonymous Data Collection

CVFox includes an optional feature that invites you to contribute anonymous salary and offer data when you mark a job application as “Offer received”. Participation is entirely voluntary. Before any data is submitted, you must actively check a consent checkbox. You can dismiss the prompt at any time with no consequences.

What data is collected

When you choose to participate, the following data points are collected:

• Job role — normalised to a standard taxonomy. Your exact job title wording is not stored.
• Company name — normalised to a canonical form by AI. Your raw input is not stored.
• Salary amount and currency.
• Salary type — gross or net; annual or monthly.
• Offer year and quarter (e.g. Q1 2026) — no exact date.
• Country.
• Region or state.
• Age range (e.g. 25–29 years).
• Gender — optional; “Prefer not to say” is always available.
• Years of experience range (e.g. 5–9 years).
• Contract type (e.g. permanent, fixed-term, freelance).
• Remote policy (e.g. on-site, hybrid, fully remote).
• Selected benefits from a fixed checklist (e.g. health insurance, equity, performance bonus).

What is NOT collected

We are deliberately careful about what we never collect or store:

• Your name or email address.
• Your CVFox account ID or any internal user identifier.
• Your exact date of birth.
• Your street address or postal / ZIP code.
• Any IP address, device fingerprint, or session token.
• Any information that could directly or indirectly link the record back to you.

Lawful basis

The lawful basis for processing this data is your freely given, specific, and informed consent (Art. 6(1)(a) GDPR). You consent by actively checking a checkbox before submitting. You can withdraw that consent at any time before submission by closing the prompt — no data is stored unless you confirm.

Anonymity and the right to erasure

Once submitted, salary data is stored with no link to your CVFox account, session, or device. No identifier — technical or personal — is retained that would allow anyone to trace the record back to you. Because re-identification is technically impossible after submission, the data is no longer personal data under GDPR, and the right to erasure (Art. 17 GDPR) cannot be applied to data that has already been submitted. We make this limitation clear before you submit, so you can make a fully informed decision.

Purpose

Contributed data is used solely to generate aggregate salary transparency statistics displayed within CVFox — for example, typical salary ranges per role, country, and company. Individual records are never shown. Data is only surfaced in aggregated form once a minimum number of submissions exist for a given filter combination, to prevent any possibility of re-identification.

AI processing of your input

Job titles and company names you enter are processed by an AI model to normalise them to a canonical, standardised form before storage. Your original input is discarded immediately and not stored. This ensures consistent, comparable statistics across all contributions.

Data retention

Because salary contribution data is irreversibly anonymised at the point of submission and contains no personal data, it is retained indefinitely for ongoing statistical purposes. The dataset is reviewed at least once per year to confirm it continues to serve its stated purpose.

3. AI Features

CVFox's AI features (Enhance, Translate) send relevant portions of your CV content to a third-party AI provider (OpenAI) solely to fulfil the specific action you request. This data is processed transiently and is not used to train OpenAI's models under our enterprise agreement. We recommend you do not include highly sensitive personal information (e.g. passport numbers, financial data) in your CV.

4. Data Sharing

We share your information only with:

• Service providers who help us operate CVFox (hosting, email delivery, payment processing, analytics) — under strict data-processing agreements.
• Law enforcement or courts if required by a valid legal process.
• A successor entity in the event of a merger or acquisition — you will be notified in advance.

5. Data Retention

We retain your account and CV data for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days, except where we are required by law to retain it longer.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and all associated data.
• Export your CV data in a portable format.
• Object to or restrict certain types of processing.

To exercise any of these rights, email us at info@irontec.ch.

7. Cookies

CVFox uses minimal first-party cookies for session management and preference storage. We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, but some features (such as staying logged in) will not work without them.

8. Security

We use industry-standard measures to protect your data: encrypted connections (TLS), hashed passwords (bcrypt), and access-controlled infrastructure. No system is 100% secure — if you believe your account has been compromised, contact us immediately at info@irontec.ch.

9. Children's Privacy

CVFox is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a prominent notice on the website at least 14 days before taking effect. The "Last updated" date at the top of this page reflects the latest revision.

11. Contact

Questions about this policy? Contact us at:
CVFox
info@irontec.ch