OpenCiVera

Privacy Policy

Last updated: 2026-06-14

1. Who We Are

OpenCiVera ("we", "us", "our") is operated by Łukasz Michta. For any questions about this policy or your personal data, contact us at opencvproject@proton.me.

2. What Data We Collect

  • Account data: email address, encrypted password (managed by our authentication provider), display name, profile photo (optional), account role.
  • CV content: any information you choose to add to your CV documents, which may include your name, job title, professional summary, contact details (email, phone, location, LinkedIn, website), skills, technologies, languages, work experience, education, and courses or certifications.
  • Published CV data: snapshots of CV versions you choose to publish, and metadata about the public links you create (status, selected languages, visibility settings).
  • Usage data: aggregated view counts for your published CV links, and administrative audit logs used for security purposes (account actions with timestamps).

3. Why We Process Your Data

  • To create and operate your account and provide the CV-management and publishing service. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
  • To generate and host public CV links at your request. Legal basis: performance of a contract.
  • To maintain security, prevent abuse, and keep administrative audit logs. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
  • We do not use your data for advertising and we do not sell your data.

4. Who We Share Your Data With

We use the following service providers (processors) to operate OpenCiVera:

  • Supabase, for our database, authentication, and file storage, hosted in the European Union (Frankfurt).
  • Netlify, Inc., for application hosting. Netlify is based in the United States; Netlify's standard Data Processing Agreement and Standard Contractual Clauses apply to any transfer of personal data outside the European Economic Area.

We do not share your CV content with any other third party unless you choose to make it publicly available via a Public Link that you create.

OpenCiVera is currently an MVP (Minimum Viable Product) in a testing phase. We are not responsible for changes that Supabase or Netlify make to their own privacy policies, terms, or data-handling practices; please refer to their respective policies for the most current information.

5. Data Retention

  • While your account is active, we retain your account and CV data for as long as you keep your account.
  • If you delete your account yourself using the "Delete account and all data" option in your account settings, your personal data is deleted immediately.
  • If you request deletion through other means (for example, because you can no longer access your account), we will delete your personal data within 30 days of confirming the request, except where retention is required by law or for legitimate security purposes (such as administrative audit logs).
  • Aggregated, non-identifying analytics (such as link view counts) may be retained longer for product improvement, in line with our internal data retention policy.

6. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request erasure of your data ("right to be forgotten").
  • Request restriction of processing.
  • Receive a copy of your data in a portable format.
  • Object to processing based on legitimate interest.
  • Lodge a complaint with your local data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

To exercise any of these rights, contact us at opencvproject@proton.me. We will respond within one month, as required by law.

7. Cookies

We use only cookies that are strictly necessary for authentication, to keep you signed in. We do not use third-party advertising or analytics cookies that require consent.

8. International Data Transfers

Your account and CV data are stored within the European Economic Area (EU, Frankfurt). Where a service provider is located outside the EEA, appropriate safeguards (such as Standard Contractual Clauses) are in place.

9. Children

OpenCiVera is not directed at individuals under the age of 16, and we do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via email or an in-app notice.

11. Contact

For privacy-related questions or requests, contact: opencvproject@proton.me