Legal

Privacy policy

Last updated: 22 October 2026

This page explains what CV Studio stores about you, what leaves our servers and when, and how to get your data back or have it deleted. It is written to be read, not to be skipped.

1. 01Who we are

   CV Studio is a resume builder operated by Glorea Career. When this page says "we", it means Glorea Career, and when it says "the service", it means CV Studio and everything you can reach once you have signed in.

2. 02What we collect

   Only what the service needs in order to work. There is no tracking pixel, no advertising network and no analytics profile built about you.

   • Your account: first name, last name, email address, and a hash of your password. The password itself is never stored, so nobody can read it back — us included.
   • Your professional profile: whatever you choose to put in it — phone number, location, links, summary, education, work experience, internships, projects, skills, languages, certifications, activities, and a photo if you upload one.
   • What you create: your CVs, your cover letters, and the job descriptions you paste in when you ask for a letter, a match score or a salary estimate.
   • Files you upload: a profile photo, and any CV you import for us to read into your profile. These are stored on our servers.

3. 03AI features, and what leaves our servers

   This is the part worth reading carefully. Several features are produced by an AI model rather than by us: the profile review, generated or rewritten CV text, cover letters, job matching and salary estimates.

   When you use one of those, the text it needs is sent to OpenRouter, which passes it to the model provider that produces the result. For a cover letter, that means the relevant parts of your profile and the job description you pasted. There is no way to produce those results without sending that text, which is why using an AI feature is always something you choose to do.

   Everything else you write stays in our own database and is only ever read back for your account.

4. 04Cookies and what your browser keeps

   We set one cookie, and it exists so that you stay signed in. It is httpOnly, which means scripts running on the page cannot read it. We do not use advertising or tracking cookies.

   Your browser also keeps your chosen interface language locally so the site opens in it next time. That preference never reaches our servers.

5. 05Who else sees your data

   We do not sell your data, we do not rent it, and we do not hand it to advertisers. It is shared only with the providers the service runs on:

   • OpenRouter and the model provider behind it, for the AI features described above, and only for the text those features need.
   • Our email provider, to deliver your sign-in and verification codes.
   • A competent authority, if the law obliges us to — and we will tell you unless we are forbidden from doing so.

6. 06How your data is protected

   Specifics rather than slogans: your password is stored only as an Argon2 hash; your session lives in an httpOnly cookie; sign-in codes are stored hashed and compared in constant time; and every CV, cover letter and profile is fetched against your own account, so one account can never reach another's work.

   No service can promise that nothing will ever go wrong. If a breach ever affects your data, we will tell you and we will tell you what was involved.

7. 07How long we keep it

   Your account and everything in it are kept for as long as the account exists, because a CV you wrote last year is meant to still be there this year. When you ask us to delete the account, we delete it and its contents.

8. 08Your rights

   You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything in it. You can withdraw from the AI features at any time simply by not using them.

   Being straight with you: downloading your data and deleting your account are not self-service yet. There is no button for either. Write to us at the address at the bottom of this page and we will do it for you, and we will confirm when it is done.

9. 09Age

   CV Studio is meant for people looking for work, a course or an internship, and is not intended for children under 16. If you are under 16, please do not create an account.

10. 10Changes to this policy

    If we change how we handle your data, we will change this page and move the date at the top of it. If a change is significant — a new provider receiving your text, for instance — we will tell you rather than hope you notice.