Privacy Policy

SupraCV is an independently operated software-as-a-service application based in Italy. Our marketing website is available at supracv.com and our application is available at app.supracv.com.

SupraCV is a service that allows users to create and publish professional online profiles using customizable templates. Users may create a profile, enter professional information, upload documents, select a template, and publish their profile through a public SupraCV URL.

Some templates are available as individual purchases, while paid subscriptions may provide access to premium templates and additional features.

For any privacy-related question or request, you can contact us at info@supracv.com.

We collect only information that is necessary to operate, secure, improve, and provide SupraCV. Depending on how you use the Service, this may include the following categories of information.

Account Information

When you create an account, we may process:

• your email address;
• your SupraCV user identifier;
• your subscription plan;
• your account status;
• onboarding status;
• feature usage information;
• account creation and update dates.

Authentication and account management are provided through Clerk. Clerk may process information necessary to authenticate you, maintain your session, protect your account, and prevent unauthorized access.

When you create a SupraCV profile, we may store information including:

• your profile identifier;
• your chosen public profile URL or slug;
• your selected template;
• profile information saved as a draft;
• published profile information;
• publication date;
• profile creation and update dates.

The exact information contained in your profile is determined by you. This may include professional or personal information such as your name, job title, work experience, education, skills, contact information, social links, portfolio links, or other information you choose to provide.

SupraCV allows you to publish a profile that can be accessed through a public URL. When you publish your profile, the information contained in the published version becomes publicly accessible.

This means that third parties may be able to:

• view your profile;
• access it through its public URL;
• share the URL;
• copy information displayed on the profile;
• save or screenshot publicly displayed information.

Public SupraCV pages may also be discoverable or indexed by search engines where applicable. You are responsible for deciding what information you publish. You should not publish confidential information, highly sensitive information, or information belonging to another person unless you have the right to do so. You may unpublish or modify your profile using the features available in SupraCV.

SupraCV may allow you to upload documents, including CVs or resumes, to help you create or complete your profile. When you upload a file, we may store and process:

• the file name;
• file size;
• file format or MIME type;
• the original file;
• text extracted from or contained in the document;
• upload date;
• the account associated with the document.

Documents may contain information such as employment history, education, skills, contact information, certifications, and other information voluntarily included by you. We use uploaded documents only as necessary to provide SupraCV features, including storing documents, reading their contents, extracting relevant information, and helping populate your profile.

SupraCV may collect limited information when a public profile is visited. This may include the profile that was visited, a visitor identifier where available, the date of the visit, and information necessary to prevent duplicate visit counting.

We use this information to provide profile statistics, improve the accuracy of visit counts, prevent manipulation, and protect the Service from abuse. Profile visit information is not collected for the purpose of selling visitor information or creating advertising profiles.

Payments on SupraCV are processed through Stripe. SupraCV may store limited payment-related information such as your Stripe customer identifier, Stripe checkout or transaction identifiers, your current subscription plan, templates you purchased, purchase dates, and subscription status.

Your complete payment card information is not stored directly in the SupraCV database when your payment is processed through Stripe. Stripe processes payment information according to its own legal terms and privacy practices. Stripe may independently retain certain transaction information where required for payment processing, fraud prevention, security, regulatory compliance, or other legal obligations.

SupraCV allows certain premium templates to be purchased individually. When you purchase a template, we record information necessary to associate the purchase with your SupraCV account, including your account identifier, the purchased template, relevant Stripe transaction or checkout information, and the date of purchase. This information is used to keep the purchased template available to your account.

SupraCV may offer monthly paid subscriptions. We may process information relating to your subscription status, your selected plan, your Stripe customer identifier, subscription-related payment information, and subscription cancellation. Payment processing and subscription billing are handled through Stripe.

When you cancel a subscription or delete your account, we may ask you to select a reason, such as price, not finding the Service useful, finding an alternative, missing features, complexity, technical issues, or another reason.

Feedback is stored anonymously. Feedback records contain only a random record identifier, the selected reason, and the submission date. We do not store your user identifier, email address, or free-text comments with feedback, and cannot link a feedback record back to your account.

SupraCV may maintain limited technical records relating to system events and transactional emails. These records may include an event identifier, the type of email or notification, and the date and time it was sent. We use this information to prevent duplicate communications, troubleshoot problems, and ensure that important system events are processed correctly.

We may use personal information to:

• create and maintain your account;
• authenticate you;
• provide the SupraCV application;
• save and publish your profile;
• process uploaded documents and provide autofill functionality;
• provide profile visit statistics;
• manage templates, purchases, and subscriptions;
• process payments through Stripe;
• provide customer support;
• send service-related communications;
• prevent fraud and abuse, secure SupraCV, and diagnose technical problems;
• improve SupraCV;
• comply with applicable laws and establish, exercise, or defend legal claims.

We do not sell your personal information.

Where European data protection law applies, including the GDPR, we process personal information under one or more appropriate legal bases.

Contract

We process information when it is necessary to provide the SupraCV service you requested. This includes account creation, authentication, profiles, documents, template purchases, subscriptions, and customer support.

Legitimate Interests

We may process information where reasonably necessary for legitimate interests such as maintaining security, preventing fraud and abuse, improving SupraCV, troubleshooting technical issues, protecting users and our infrastructure, understanding how features are used, and resolving disputes.

Legal Obligations

We may process or retain information when required to comply with tax, accounting, regulatory, judicial, or other legal obligations.

Consent

Where applicable law requires consent, we will request it before carrying out the relevant processing. You may withdraw consent at any time where processing is based on consent.

Clerk provides user authentication and session management. Information necessary for authentication, login, account security, and session management may therefore be processed through Clerk.

Stripe provides payment processing and subscription billing. Payment and transaction information necessary to complete purchases and subscriptions may therefore be processed through Stripe.

Google (Gemini API) powers the Resume Auto-Fill feature. When you explicitly run Auto-Fill on one of your uploaded documents, the text extracted from that document is sent to Google's Gemini API solely to extract the structured information shown back to you. Document text is sent only when you use this feature, and you can review and edit the extracted data before anything is saved to your profile. Google processes this information according to its own terms and privacy practices.

SupraCV may also use third-party infrastructure providers for services such as application hosting, databases, file storage, email delivery, security, monitoring, error reporting, and technical infrastructure. These providers receive only the information reasonably necessary to provide their services.

Some technology providers used by SupraCV may process information outside Italy or outside the European Economic Area. Where European data protection law requires additional safeguards for such transfers, appropriate legally recognized transfer mechanisms are used by SupraCV or the relevant service provider.

We retain personal information only for as long as reasonably necessary to operate SupraCV and fulfil the purposes described in this Privacy Policy. In general:

• account information is retained while your account exists;
• profile information is retained while your account or profile exists;
• draft profile information is retained until you delete it or delete your account;
• published profile information is retained until you unpublish, delete it, or delete your account;
• uploaded documents are retained until you delete them or delete your account;
• profile visit information may be retained for up to 24 months before deletion or aggregation;
• anonymous cancellation and account deletion reasons may be retained for product analysis because they are not linked to an account;
• operational logs may be retained for as long as reasonably necessary for security and troubleshooting;
• payment and transaction information may be retained for longer where required by applicable legal, accounting, tax, fraud-prevention, or dispute-resolution obligations.

Data contained in temporary backups may remain for a limited additional period before being overwritten or deleted as part of normal backup procedures.

You may delete your SupraCV account using the account deletion functionality available within the application. You may also contact us at info@supracv.com.

When in-app account deletion succeeds, we permanently delete information directly associated with your SupraCV account, including your profile, drafts, uploaded documents, settings, and template purchase entitlements. We also immediately cancel active SupraCV subscriptions and request deletion of your authentication account from Clerk.

Certain information may be retained when reasonably necessary for legal obligations, accounting or tax obligations, payment disputes, fraud prevention, security, legal claims, and enforcement of agreements. Anonymous feedback reasons may remain as described above, and temporary backups may persist until overwritten through normal backup procedures. Information independently held by third-party providers such as Stripe or Clerk may remain subject to their own retention requirements.

Depending on applicable law, you may have the right to access personal information we hold about you, correct inaccurate personal information, request deletion of your information, request restriction of certain processing, object to certain processing, receive certain information in a portable format, withdraw consent where processing is based on consent, and lodge a complaint with a competent data protection authority.

If you are located in the European Economic Area, these rights may include the rights provided by the GDPR. If you are in Italy, you may also have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali.

You may exercise your rights by contacting info@supracv.com. We may ask for reasonable information to verify that the request relates to you.

SupraCV may use cookies and similar technologies that are necessary for authentication, maintaining secure sessions, account functionality, security, and fraud prevention. In particular, Clerk may use technologies necessary to maintain authentication sessions.

Where SupraCV uses technologies that require consent under applicable law, consent will be requested before those technologies are activated.

We use reasonable technical and organizational measures designed to protect information against unauthorized access, accidental loss, misuse, alteration, disclosure, and destruction. However, no internet-based service or storage system can guarantee absolute security. You are responsible for protecting the devices and authentication methods you use to access SupraCV.

SupraCV may provide automatic features that help extract, organize, autofill, rewrite, or process information contained in CVs, documents, or profiles. Resume Auto-Fill runs only when you explicitly request it on one of your documents, and the extracted text is processed by Google's Gemini API for that purpose (see "Third-Party Service Providers"). These tools are intended to assist users. Automatically produced results may contain errors or omissions and should be reviewed before they are published or relied upon. SupraCV does not use these features to make employment decisions about users.

Public profiles may contain links provided by users to third-party websites such as personal websites, social networks, portfolios, or other services. SupraCV is not responsible for the privacy practices, availability, content, or security of third-party websites.

We may update this Privacy Policy when necessary to reflect changes to SupraCV, our technology providers, our practices, or applicable legal requirements. The latest version will always be made available through SupraCV. The date at the top of this Privacy Policy indicates when it was last updated. Where required, users will be informed of material changes.