CVPanel

Privacy Policy

Datenschutzerklärung — Last updated: June 2026

1. Controller

The controller responsible for data processing on this website pursuant to Art. 4(7) GDPR is:

Awa Darabi
Ludwig-Jahn-Str. 19
79331 Teningen, Germany
Contact: Contact form

2. What Data We Collect

When you use CVPanel, we collect and store the following data:

  • Account data: Your email address and account creation date, provided during sign-up via Supabase Auth.
  • Resume files: PDF files you upload, stored securely in Supabase Storage. We also store a parsed JSON representation of your resume content to power AI tailoring.
  • Job applications: Company names, job titles, job descriptions, and AI-tailored resume versions you create within the app.
  • Newsletter email: If you subscribe to our newsletter, we store your email address for that purpose only.

3. How We Use Your Data

We use your data solely to provide the CVPanel service:

  • Your resume and job descriptions are sent to our AI service (n8n) to generate tailored resumes. This data is processed only for that purpose and is not stored by the AI service beyond processing.
  • Application data is stored so you can track and manage your job applications over time.
  • We do not sell, share, or rent your data to third parties.

4. Data Retention

We retain your data for as long as your account is active. Your resume files, application data, and account information are stored indefinitely so the service remains useful across sessions.

If you would like your data deleted, you can request full account deletion at any time (see Section 6). Upon request, we will permanently and completely remove all your data from our database and storage — including your account, all resume files, all application records, and any associated data.

5. Legal Basis

We process your data on the basis of Art. 6(1)(b) GDPR (performance of a contract) for your account and application data, and Art. 6(1)(a) GDPR (consent) for newsletter subscriptions.

6. Your Rights

Under GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR): Request a copy of all data we hold about you.
  • Right to rectification (Art. 16 GDPR): Request correction of inaccurate data.
  • Right to erasure (Art. 17 GDPR): Request complete deletion of all your data. We will remove everything from our database and file storage with no exceptions.
  • Right to data portability (Art. 20 GDPR): Request your data in a machine-readable format.
  • Right to withdraw consent (Art. 7 GDPR): You may unsubscribe from the newsletter at any time.

To exercise any of these rights, contact us at: our contact form. We will respond within 30 days.

7. Infrastructure & Hosting

CVPanel is hosted and operated using the following services:

  • Vercel — website hosting and serverless functions (San Francisco, USA). Data transfers to the US are covered by Vercel's Data Processing Agreement and Standard Contractual Clauses.
  • Supabase — authentication, database (PostgreSQL), and file storage for resume PDFs.
  • Sentry — error monitoring. Error reports may contain metadata but do not intentionally include personal data.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority in Germany is the Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI), or the data protection authority of the German federal state where you reside.