This is an English translation. The German version is binding: Datenschutzerklärung

Privacy policy

Applies to cvabroad.com (creating application documents for work at home and abroad) · Version 1.4 · Status as of 06.11.2026

1. Controller

Karol Weiher, Badergasse 1, 15230 Frankfurt (Oder), Germany · support@cvabroad.com.

2. What data this website processes

The website has no user accounts. Personal data is processed only in the cases described below. We do not store on our server the content you enter in the application (job ad, CV, answers, created documents). On our server we store, after a purchase, only the details of your access (section 7).

3. Hosting and technical data

The website and application are provided via Cloudflare (Cloudflare, Inc., USA). When you visit, your browser transmits technical data, in particular IP address, date and time, the address visited and details of your browser and device. Cloudflare processes them to deliver the page and to protect against attacks and misuse. Legal basis: legitimate interest in secure and functional provision (Art. 6(1)(f) GDPR). The website uses system fonts; no requests are sent to font providers on loading.

Our own counters: The website counts page views and created sets of documents as plain totals, without recognising people or devices.

4. Creating the application documents

When you use the application, you send us the job ad (text, link, screenshot or PDF), your CV or your details of work experience, education and skills, your contact details and your answers to follow-up questions. Our server forwards this content to the AI model Claude by Anthropic, which creates the match analysis and the documents from it, and returns the result to your browser. The content is processed only in working memory; our logs contain only technical details (type of request, model, size), no content.

Anthropic processes the data as a processor on the basis of its Data Processing Addendum, which is part of Anthropic's commercial terms. Under these terms Anthropic may not use customer content to train its models. For transfers to third countries the contract contains the EU standard contractual clauses.

A photo you add to the CV stays in your browser; it is inserted only into the PDF or Word file (DOCX) generated there and is not sent to our server.

Purpose: creating the analysis and documents you requested. Legal basis: performance of the contract of use or pre-contractual measures at your request (Art. 6(1)(b) GDPR). Please do not enter special categories of personal data (e.g. health, religion) that are not needed for the application. If you do so anyway, we process them only to create your document, on the basis of your explicit consent given by entering them (Art. 9(2)(a) GDPR).

5. Retrieving job ads by link

If you enter a link to a job ad, our server retrieves that page to read the text of the ad. The operator of the target page sees our server, not your IP address. Legal basis: Art. 6(1)(b) GDPR.

6. Storage in the browser

The application stores your work in progress (texts, answers and created documents) in your browser's storage on this device, so that nothing is lost when you close the window. Files (CV, screenshots, PDF, photo) stay only in the working memory of the tab with the application until you reload or close it. The stored data stays in the browser until you delete it; in a private window it is deleted on closing. Also stored in the browser are your choice in the consent window, your access key with the end date of access, during a purchase a random identifier of that purchase (see section 7), and the date and time of your declaration that the service should be performed immediately. This declaration is sent with every request to create documents; without it no documents are created. This data stays on your device until you delete the data of this website in your browser settings.

7. Purchase and access

The order and payment are handled for us by the Payhip service (Payhip Limited, 1st Floor, 2 Woodberry Grove, London, N12 0DR, United Kingdom). In the checkout Payhip collects in particular your e-mail address, your country and your declaration on immediate performance; according to its own statement Payhip is the controller for this, and Payhip's privacy policy applies (payhip.com/privacy). You enter your payment details (e.g. card, Google Pay) directly with Stripe (Stripe Payments Europe, Limited, Ireland); we do not receive them.

In the checkout Payhip also shows a box, not pre-ticked, “Send me product updates and offers via email”. If you tick it, Payhip stores your e-mail address with your consent in our account. We do not currently send a newsletter. Should we do so in future, it will be only to people who have consented; you can withdraw your consent at any time with effect for the future, for example by e-mail to support@cvabroad.com. Legal basis: your consent (Art. 6(1)(a) GDPR).

After payment Payhip sends us your e-mail address, the order number, price, currency, date and time of purchase and your access key; in the case of a refund, the refund. If you start the purchase in the application, the link to the order contains a random identifier and the language of the application; Payhip sends both back to us so that the application can unlock access in your browser by itself. On our server (Cloudflare) we store your e-mail address, order numbers, times of purchase, access keys, refunds and the number of sets of documents created each day and in each 30-day period. If you enter an access key in the application, we ask Payhip whether it is valid and when it was bought. Purpose: unlocking access, calculating its end and the usage limits, refunds. Legal basis: Art. 6(1)(b) GDPR. We delete these details automatically 60 days after the end of your access. Order and invoice data that we must keep for tax reasons are in our account at Payhip.

8. Analytics and advertising measurement (only with your consent)

If you agree in the choice window, the website loads Google Analytics (Google Ireland Limited / Google LLC) and the Meta Pixel (Meta Platforms Ireland Limited / Meta Platforms, Inc.). These set cookies on your device and record how you use the website and how our content and ads perform. Content from the application (CV, job ad, documents) is not sent to these services. If you decline, none of them is loaded. We and Meta are joint controllers for the collection and transmission of data to Meta; Meta is the controller for further processing. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time with effect for the future: click “Cookie settings” at the bottom of any page.

9. Contact by e-mail and error reports

If you write to support@cvabroad.com, we process your e-mail address and the content of your message in order to reply. Legal basis: pre-contractual measures or performance of the contract at your request, or legitimate interest in answering enquiries (Art. 6(1)(b) or (f) GDPR). We delete the correspondence once it is dealt with, unless there is a statutory retention duty. The mailbox is provided by Google (Gmail).

Error reports from the application: If you report an error via “Report a problem”, we process your description, voluntarily your e-mail address and technical details (step of the application, last error message, browser, screen size, version of the page, country according to Cloudflare). We send the text of the job ad only if you tick that option; your CV never. The report is stored as an entry in a non-public project at GitHub (GitHub, Inc., USA) and delivered to us by e-mail. For fixing errors it may be evaluated automatically using AI (Claude by Anthropic). If you gave an e-mail address, we reply to it; the reply may be automatically generated and is then marked as such. Purpose: fixing errors and answering your question. Legal basis: Art. 6(1)(b) and (f) GDPR. We delete the report as soon as it is no longer needed for handling and tracing the fix, at the latest after 12 months.

Sending e-mail and mailbox: We send e-mails from CVabroad via Cloudflare (Email Service) from the address support@cvabroad.com. Cloudflare (Email Routing) forwards e-mails sent to this address to our mailbox.

10. Links to other websites and affiliate links

Some links on this website lead to other offers and service providers. Some of them may be affiliate links: if you buy a product or sign up for a service after clicking, we may receive a commission; the price for you does not change. We mark such links as affiliate links. After clicking you leave this website; the target page may set its own cookies and process your data under its own privacy rules.

11. Recipients and transfers to third countries

Recipients are Cloudflare (hosting, storage of access data, sending and forwarding e-mail), GitHub (error reports), Anthropic (creating the analysis and documents), Payhip (order) and Stripe (payment), Google (Gmail and, if you agree, Google Analytics) and Meta (Meta Pixel, if you agree). If these providers process data in the USA or the United Kingdom, the transfer is based, depending on the provider, on an adequacy decision of the EU Commission (for the United Kingdom and for companies certified under the EU-US Data Privacy Framework) or on standard contractual clauses. The match analysis describes how well the documents fit an ad; it is not an automated decision about you within the meaning of Art. 22 GDPR and is not passed on to anyone.

12. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. Contact: support@cvabroad.com. Complaints: lda.brandenburg.de or the supervisory authority of your country of residence.

13. Changes

We adapt this privacy policy when the website changes. The current version is always at this address. Version 1.4 · Status as of 06.11.2026.