CV Service

Privacy Policy

Last updated: February 20, 2026

1. Introduction

Welcome to CV Service, operated by Bhan AS (org.nr. 936 333 982), a company registered in Norway. We are the data controller responsible for your personal data.

We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our service.

2. Information We Collect

Account Information

  • Email address (required for account creation)
  • Name (optional, used for display purposes)
  • Password (stored securely using industry-standard hashing)

CV/Resume Data

When you create or import CVs, we store:

  • Personal information you include (name, contact details, address)
  • Professional history (work experience, education, skills)
  • Any other information you choose to include in your CV

Usage Data

  • AI feature usage (number of operations, types of operations)
  • Activity logs (for organization audit purposes)

3. How We Use Your Information

We use your information to:

  • Provide and maintain our CV creation and management service
  • Process AI-powered features (translations, enhancements, suggestions)
  • Send service-related communications (password resets, verification emails)
  • Improve our service through usage analytics

4. AI Processing and Third-Party Services

Important: To provide AI-powered features, we send CV content to OpenAI's API. This includes:

  • CV text for parsing, translation, and enhancement
  • Section content for AI suggestions

OpenAI processes this data according to their privacy policy. We recommend reviewing OpenAI's Privacy Policy for details.

Other third-party services:

  • Supabase: Database and authentication - your data is stored in Supabase's West Europe region (London, UK)
  • Vercel: Hosting and infrastructure - processes requests globally with edge locations including EU

International data transfers: Some of our service providers (OpenAI, Vercel) may process data outside the EU/EEA. These transfers are protected by Standard Contractual Clauses and the providers' compliance with applicable data protection frameworks.

5. Data Storage and Security

Your data is stored securely using:

  • Encrypted database connections (TLS/SSL)
  • Row-level security policies (RLS) in the database
  • Secure password hashing via Supabase Auth
  • Regular security updates

6. Your Rights (GDPR)

Under GDPR and similar regulations, you have the right to:

  • Access: Request a copy of all your data (available in Settings > Export Data)
  • Rectification: Update or correct your information
  • Erasure: Delete your account and all associated data (available in Settings)
  • Portability: Download your data in a machine-readable format (JSON)
  • Object: Opt out of certain data processing

7. Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • All CVs and resume data are permanently deleted
  • All organization memberships are removed
  • Usage logs are deleted
  • Account information is purged

8. Cookies

We use essential cookies for:

  • Authentication (keeping you logged in)
  • Session management

We do not use tracking or advertising cookies.

9. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or through the service.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: contact@bhan.no