This policy applies to crediblecv.com and the Credible CV private-beta service. Daniel Keder, sole proprietor, is responsible for the personal data described here.
This is an operational privacy notice for the current private beta. It is written to describe the service truthfully and has not been presented as a substitute for external legal advice.
Data we process
Account and contact data, such as your email address, display name, password hash, language choice and account-security records.
Career and application data you provide, including CVs, cover letters, notes, profile facts, interview answers, job descriptions, application decisions and generated documents.
Limited service and security metadata, such as completed workflow steps, controlled choices, processing time, errors and estimated model cost. Product analytics do not contain the text of your CV, profile, job descriptions, interview answers or generated documents.
If a private-beta feedback survey is offered, ratings, choices and optional comments will be stored anonymously by design, without an account, application or exact submission-time identifier. A separate account record will store only whether the survey was completed and whether you volunteered for a follow-up call. With a small test group or identifying comments, complete anonymity cannot be guaranteed.
LinkedIn profile data only if an approved connection becomes available and you choose to authorize it.
Why we use data
To create and maintain your account, build your evidence-backed profile, assess roles and prepare documents you request.
To send the data needed for an AI-assisted workflow to the selected AI provider when you start that workflow.
To secure the service, enforce account ownership, diagnose errors, control costs and improve reliability using limited metadata.
To understand aggregate private-beta feedback and contact only users who separately volunteer for a follow-up call.
To send essential account messages, respond to support or privacy requests and manage the private beta.
Legal bases
The legal basis depends on the processing purpose:
Contract or steps requested before entering a contract, for account and service actions you ask Credible CV to perform.
Consent, where an optional integration or other clearly optional processing asks for it. Consent can be withdrawn for future processing.
Legitimate interests in protecting, troubleshooting and improving the service through proportionate security and metadata processing.
Compliance with legal obligations, or establishing and defending legal claims, where applicable.
Service providers and international processing
Credible CV uses service providers only where needed to operate the service:
Hosting and data-storage infrastructure for the application and user workspaces.
The current paid third-party AI API for AI-assisted profile, role-analysis, drafting and review workflows. AI provider terms
Transactional email infrastructure for invitations, password resets and essential account messages.
LinkedIn only if you later authorize the planned LinkedIn connection.
Service providers may process data outside the European Economic Area, including in countries where they or their agents maintain facilities. Where required, Credible CV must rely on an applicable transfer mechanism and provider safeguards. The private-beta processor, DPA and international-transfer review remains ongoing.
Credible CV does not sell personal data and does not use career or LinkedIn data for third-party advertising. Do not upload confidential data or third-party personal data that you are not authorized to share.
Planned optional integration
LinkedIn data
Automatic LinkedIn profile access is not active today.
If it becomes available, connecting will be optional. You will sign in on LinkedIn and LinkedIn will show the permissions requested. Credible CV will not receive your LinkedIn password and will not scrape your profile.
Credible CV will request only approved permissions needed to read the profile information used to inform your career profile or provide the audit you request.
Imported information will be treated as candidate-provided evidence and remain subject to your review. A fact appearing on LinkedIn does not independently verify that it is complete or correct.
Revoking or disconnecting access will stop future retrieval. Information already imported into Credible CV will remain until you remove it, delete your account, or ask the privacy contact to delete it.
LinkedIn data will not be sold, used for advertising, or disclosed outside the processors needed to provide the requested Credible CV workflow.
Your active profile, applications and generated documents are kept for your account until you delete the account or the data is no longer needed for the service. Current private-beta cleanup defaults include:
Temporary source text left in incomplete profile-building sessions: 7 days.
Completed background-job records and logs, and user-rejected job leads: 30 days.
Allowlisted product-usage events: 90 days.
If collected, anonymous-by-design beta-feedback responses: 365 days. Identifying comments can reduce anonymity; separately stored survey-completion and follow-up-call choices remain with the account until deletion.
Account deletion removes the user workspace and disables the account. Limited residual copies may remain temporarily in backups, provider security logs or records that must be retained for legal reasons, and are removed or anonymized through their normal lifecycle.
Your choices and rights
Subject to applicable law and the relevant legal basis, you may request access, correction, deletion, restriction, objection or portability, and may withdraw consent for future processing.
Signed-in users can correct profile data, download an account export or delete the account from the authenticated Privacy page. You can also contact Daniel Keder at the email above.