Loading / Yükleniyor
This notice explains how and why data is processed in free and paid product flows and how long it is retained.
Notice version: 2026-10-29.persistent-cvs-paid-aiWe process the CV you upload and personal data contained in it, the job posting you paste, language and role choices, analysis and draft results, account and security records, the version and time of the data-processing notice presented, and—if you use paid features—order and payment-status data. A CV may contain special-category data; remove information that is unnecessary for the service before uploading.
Processing directly necessary to form or perform a contract may be used to provide the requested analysis, account, and purchased service; legitimate interests balanced against your fundamental rights may support security, service-performance measurement, and abuse prevention; legal obligations may support payment, accounting, and authority requests.
Data is collected electronically through upload and text fields, account and payment forms, technical security records created while you use the service, and provider flows you choose to use.
To assess how site actions work and where users stop progressing in aggregate, we use a random 30-minute first-party session marker, a broad traffic source, device category, and event time. We count arrivals, form starts, analyses, package views, and payment steps. These event records do not include raw ad-click identifiers, full referring addresses, CV/job-posting content, email addresses, or IP addresses. Events are retained for up to 90 days and the administration dashboard is restricted to authorized accounts. These product events are not sent to advertising networks or used to build profiles across sites.
Advertising measurement with Google Ads and Google Tag Manager starts only with your affirmative permission in cookie preferences. Before consent, or if you reject it, the Google tag does not load and this integration sends no measurement requests to Google. If you allow it, your IP address, browser and device information, page information, ad-click identifiers, and related cookies may be sent to Google to measure advertising performance. For real purchases with verified payment and credit delivery, the order identifier, amount, and currency are sent to Google for conversion measurement; test payments are excluded. We do not add CV or job-posting content, analysis results, or contact details to advertising measurement data. Advertising personalization and remarketing are disabled. Refusing optional measurement does not prevent you from using free or paid services.
Use “Cookie preferences” at the bottom of the page to change or withdraw permission. Your choice is saved in this browser with a validity of 180 days. Withdrawal stops further measurement; it does not retroactively delete information already sent to Google. Google may also process transferred information on servers outside Türkiye. Its data use and cookie durations are explained in the Google sources below and our Cookie Policy.
In local review mode, records stay in this running server’s temporary memory and are linked to a random HttpOnly ownership cookie in your browser. Local AI mode uses the same temporary storage; extracted CV and posting text is sent to Gemini for structured analysis and application-draft generation after direct personal identifiers are masked. A model draft is stored only after server-side schema, source-reference, and grounding checks pass. If all three validation attempts fail, a deterministic safe draft is built from validated evidence. When production services are enabled, files are held in private R2 storage and records in Neon.
Access to guest results ends after 24 hours, and access to analysis sources and AI results linked to a verified account ends after 30 days by default. Editable CVs in My CVs are retained until you delete the CV or your account. Expired records are removed through scheduled cleanup and the object-deletion queue. Local-review results can be deleted from the result screen, and production application drafts from their own screens. Early deletion of an individual production analysis is not yet available; if you have a verified account, you can use the account-deletion flow or submit a deletion/destruction request through the legal contact below. Order, contract-acceptance, and credit records may be retained separately for applicable legal or financial obligations, with content links removed.
Role, company, job link, stage, application date and encrypted private notes saved in your dashboard are stored separately from CV content. These records are retained for 365 days after the last update and can be deleted individually or with your account. Expiry of analysis sources after 30 days does not delete this summary. The former weekly free-credit reminders are no longer sent. Existing preference records and unsubscribe actions in past emails remain available.
Details entered from scratch or imported from an uploaded file, the selected design and any CV photo are stored as an encrypted draft in My CVs. Basic CV creation, editing and PDF/Word downloads do not send content to an AI provider or require credits or a subscription. Editable CVs remain in your account until you delete the CV or your account; expiry of an imported source file does not delete this independent copy. Previously expired or deleted content is not restored. The original uploaded file is queued for deletion no later than 24 hours after acceptance. You can delete individual CVs in My CVs; their content is also removed on account deletion. Files you download and store on your own device are under your control. Choosing to tailor this CV to a job activates the analysis and AI flow only after active paid-subscription verification and separate processing consent. Starting a job analysis gives the CV copy used in that analysis and its results the new operation’s 30-day retention period; the permanent copy in My CVs is unaffected by that period.
Limited to the relevant purpose, Gemini may support analysis and drafting, Cloudflare R2 private file storage, Neon database services, Inngest job execution, PayTR payments, and Clerk account verification and session management. Google Ads measurement is enabled only through your separate choice. Payment or identity services are not involved unless you use the related feature. Data is disclosed to competent authorities only where legally required.
For rights available under Article 11 of the Turkish Personal Data Protection Law—including information, access, correction, deletion or destruction, learning recipients, objecting to solely automated results, and seeking compensation—send a sufficiently identifying request to the legal contact below.
Official basis: KVKK transparency obligation and Article 11 rights