Privacy policy

C.S. VENTURE LAB, SASU, 4 Rue du Pensionnat Notre-Dame de France, Cité du Numérique, 43000 Le Puy-en-Velay, France — [email protected].

• Account and contact details — email, name, sign-in method (including Google sign-in), contact details you add.
• Career profile — work history, education, skills, languages, certifications, projects and other facts you enter or confirm.
• CVs and uploaded documents — CVs, certificates, photos, LinkedIn PDF exports and the text extracted from them.
• Job search and applications — job adverts you import or save, match reports, cover letters, applications and job alerts.
• Career assessments and interviews — assessments, skills-gap results, learning paths, mock-interview answers and interview preparation.
• Subscription and payment metadata — plan, status, billing dates, credit history. Card details are handled by Stripe and never reach us.
• AI usage and cost-protection records — which AI feature ran, when, model, token counts, cost and credits — not the text of your documents.
• Security, technical and usage logs — error reports, sign-in events, page and feature usage while signed in, consent history.

We don't need special-category data, such as health, religion, political opinions or trade-union membership, to build a CV. Please leave it out of your profile and uploads. If a document you upload contains it, you can delete it from your profile at any time. Please also leave out identity document numbers and bank details.

• Providing your account, profile, CVs and requested features — performance of our contract with you.
• Payments, invoices and credits — contract, and legal accounting and tax obligations.
• Security, fraud and cost-abuse prevention, error logs — our legitimate interest in a safe, working service.
• Usage statistics to improve the product — our legitimate interest; you can object.

We do not sell your data and do not share your CV with employers unless you share it yourself.

When you run an AI feature, the text needed for that request (for example parts of your profile, a CV or a job advert) is sent through our AI gateway provider to the AI model provider assigned to that feature. PixieCV itself does not store the text sent in its AI cost records. Suggestions are shown to you before anything is saved; no decision with legal or similarly significant effect is made about you automatically.

AI requests are processed by our AI gateway provider using AI model providers located in the European Union and the United States. Under our data processing agreement, your data is not used to train AI models. Transfers outside the EU rely on the European Commission's standard contractual clauses.

• Database and files — our cloud hosting provider (database and files stored in the EU, Ireland).
• Application hosting — our application hosting provider; requests may be served from a global network, so processing outside the EU cannot be excluded.
• AI processing — our AI gateway provider and the AI model providers it uses, which may process data outside the EU, including in the United States.
• Payments — Stripe, which may process data outside the EU.
• Sign-in emails — sent by our authentication provider.

Our providers process data on our behalf under a written data processing agreement. Our hosting provider processes technical connection data (such as IP addresses) to serve the site, protect it against abuse, fix problems and produce session-based visitor statistics.

Transfers outside the EU must rely on an adequacy decision (such as the EU–US Data Privacy Framework, for certified companies) or standard contractual clauses. You can ask us for details of the safeguards at [email protected].

The names of our providers are available on request at [email protected].

• Profile, CVs, letters, applications and assessments: while your account is open, until you delete them or the account.
• Original uploaded files: deleted automatically after the period you choose in Settings (1 to 365 days), unless you choose to keep them.
• Account deletion: removes your profile, documents, files, credit records, usage records and your sign-in account.
• After an account is deleted, payment records are kept for 10 years (French accounting law), and checkout consent records and withdrawal/refund requests for 5 years as proof in case of a dispute; they are then deleted.
• Invoices and payment records held by Stripe are kept by Stripe as required for accounting and legal purposes.
• Technical error logs: kept for security and troubleshooting, then deleted automatically after 90 days.
• Usage statistics: deleted automatically after 13 months.
• Backups: deleted data may remain in backups for a limited time before it is permanently removed.

• Access your data and receive a copy (portability) — self-service export in Settings.
• Correct your data — directly in the app.
• Delete your account and data — self-service in Settings. See how to delete your account.
• Restrict or object to processing based on our legitimate interest.
• Withdraw consent where processing relies on it, without affecting earlier processing.
• Give instructions about your data after your death (French law).
• Complain to the CNIL (Commission Nationale de l'Informatique et des Libertés) — cnil.fr.

Open Settings or write to [email protected]. We reply within one month.

Your records are restricted to your account at the database level, uploaded files are private and opened only through short-lived links, connections are encrypted and admin actions are logged.

PixieCV is not intended for anyone under 16. See the cookie policy. If we change this policy in a way that affects you, we will tell you in the app and ask for consent again where required.