Skip to main content
FreeCV.co

Privacy Policy

Effective date: this policy applies from the date shown by your most recent visit. We update the effective date whenever the policy changes.

1. Introduction

FreeCV.co ("we", "us", "our") operates the free resume and cover-letter builder available at freecv.co. This Privacy Policy explains what information we collect, why we collect it, and the choices you have. If you have any privacy question, contact us at hello@freecv.co or via our contact page.

2. Information we collect

  • Account data: your email address, name, and a securely hashed password (we never store passwords in plaintext). If you sign in with Google or LinkedIn, we receive your name, email, and avatar from that provider.
  • Resume and content data: everything you enter into the builder. This is your own content, stored only to provide the service back to you.
  • Usage data: pages visited, template chosen, and download events. Your IP address is always hashed at rest — we do not keep raw IP addresses in our database.
  • Device and log data: browser type, operating system, and referrer, as found in standard web-server logs.
  • Cookies: see our separate Cookie Policy for the full list.

3. How we collect information

We collect information directly from you (forms and account creation), automatically (cookies and analytics), and from third parties (Google/LinkedIn OAuth, only when you choose that sign-in method). We never purchase third-party data about you.

4. How we use information

To provide the resume builder, manage your account, send transactional email (verification, password reset, and admin login alerts), improve the service through aggregated analytics, and serve advertising. Advertising can be personalized or non-personalized depending on your consent choices.

5. Legal basis for processing (EU/UK/EEA visitors)

We rely on contract performance to provide your account and the builder, consent for analytics and advertising cookies (managed through our consent banner), and legitimate interest for basic security logging and abuse prevention such as rate limiting and IP blocklisting.

6. Cookies and tracking

We use essential, analytics, and advertising cookies. Full details, including a cookie table, are in our Cookie Policy.

7. Third-party services

We use the following third parties. Each has its own privacy policy:

  • Google AdSense / Google Ad Manager: Google and its partners use cookies to serve ads based on your activity on this and other sites. You can control ad personalization at adssettings.google.com and learn more at google.com/policies/technologies/ads.
  • Ezoic (if enabled): see Ezoic's privacy policy and its own opt-out tooling.
  • Google Tag Manager / Google Analytics 4: governed by Google's privacy policy; our use is controlled by Consent Mode v2.
  • Google & LinkedIn OAuth: these providers share your name, email, and avatar only when you actively choose that sign-in method.
  • Cloudflare Turnstile: used only for bot prevention on specific forms.
  • SMTP email provider: transactional email only; we never send marketing email without separate double opt-in.

General ad opt-out resources: DAA, NAI, and EDAA (EU).

8. International data transfers

Data is processed on our server and via Google's global infrastructure, which may mean processing in countries other than your own. For EU/UK visitors, appropriate safeguards (such as Standard Contractual Clauses, where applicable to the processors we use) apply to those transfers.

9. Data retention

  • Account data: kept until you delete your account, plus a short grace period.
  • Resume content: kept until you delete it or delete your account.
  • Download and audit logs: retained for up to 12 months.
  • Backups: a rolling 30-day window.

10. Your rights

EU/UK GDPR: access, rectification, erasure, restriction, data portability, objection, and the right to withdraw consent at any time. California (CCPA/CPRA): the right to know, delete, and opt out of the sale or sharing of your personal information (use the "Do Not Sell or Share My Personal Information" link in our footer), and the right not to be discriminated against for exercising these rights. To exercise any right, email hello@freecv.co; we aim to respond within 30 days.

11. Children's privacy

FreeCV.co is not directed at children under 13 (or under 16 where required) and we do not knowingly collect their data. If we learn we have inadvertently collected such data, we delete it promptly.

12. Security

We use encrypted connections (HTTPS everywhere), hashed passwords (bcrypt), hashed IP addresses, and 2FA-protected admin access.

13. Changes to this policy

We communicate updates by revising the effective date. Material changes are additionally announced on the site and, for account holders, by email.

14. Contact

Privacy questions: hello@freecv.co or our contact page.