Privacy policy

Last updated: 6 November 2026

1. Controller

The controller of your personal data is ROSTO SRL, Str. Știrbei Vodă 166, 010121 Bucharest, Romania, VAT RO5801425. For any privacy request, write to support@cv-perfect.com.

2. What data we process and why

Data	Purpose	Legal basis
Your CV and the information you enter (target job, skills, objectives, photo)	To review your CV and create your professional CV	Performance of a contract (Art. 6(1)(b) GDPR)
Email address	To send your report, your CV, login links and service messages	Performance of a contract
Billing details (name, address, country, VAT number)	Payments, invoicing, VAT	Legal obligation (Art. 6(1)(c))
Technical data (IP address, browser, usage events)	Security, fraud and abuse prevention, service improvement	Legitimate interest (Art. 6(1)(f))

A CV may contain special categories of data only if you choose to include them; we recommend leaving out data such as date of birth, marital status or health information, and our service removes it from the rewritten CV.

3. Processors

We use carefully selected providers that process data on our behalf under data processing agreements: Contabo GmbH (hosting, Germany), Anthropic PBC (AI processing of your CV, USA — transfers protected by the EU Standard Contractual Clauses; your data is not used to train AI models), Amazon Web Services EMEA (email delivery, Ireland) and Stripe Payments Europe Ltd (payments, Ireland).

4. Retention

Uploaded CVs, reports and generated CVs are kept for 12 months after your last activity, so that you can download them again, and are then deleted. Invoices and payment records are kept for the period required by Romanian accounting law (10 years). You can ask us to delete your data earlier at any time.

5. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. You can also lodge a complaint with the Romanian supervisory authority (ANSPDCP, dataprotection.ro) or with the authority in your country of residence.

6. Cookies

We only use essential cookies: a session cookie that keeps you logged in and protects forms, and a local preference that remembers you closed the cookie notice. We do not use advertising or tracking cookies.

7. Security

All connections are encrypted (HTTPS). Files are stored outside the public web space and are only accessible to you through your session or account.