Privacy Policy

Last updated: 2026-11-09

In short

We encrypt your profile, CVs, cover letters, application history and rehearsal interviews on your device before they reach our server. We do not have the key, so we cannot read them.
AI features run on OpenAI. We send only what a given feature needs, without your contact details. OpenAI does not train models on it and deletes it within 30 days at most.
We turn analytics in the app on only with your consent. We count visits to the cvizo.com website without cookies, on our own server. We turn Google Analytics on that website on only if you agree to it.
We do not sell your data and we do not show ads.

The controller

The controller of your personal data is Dawid Dowgiałło, a sole trader doing business as Dawid Dowgiałło IT, ul. Grottgera 3/8, 11-010 Barczewo, Poland, NIP (tax id) 7393996938, REGON 527893932 (“we”).

For privacy matters, write to support@cvizo.com. We have not appointed a data protection officer.

What data we process and for how long

Data	Purpose	Legal basis	How long
Account data: display name, e-mail address, password (stored so that it cannot be read back), sign-in method, role, interface language	Creating and running your account, e-mails in your language	contract	Until the account is deleted. An account nobody signs in to for 24 months is deleted with everything in it, and we send a warning 30 days before. An account with an unconfirmed e-mail address is deleted after 7 days
Your statement that you are 18 or older, date of last sign-in, inactivity warnings	The age requirement in the Terms, deleting inactive accounts	contract, our legitimate interest	Until the account is deleted
What you create in the app (encrypted): profile, CVs, cover letters, applications, form answers, calendar events, CV check results, offer analyses, rehearsal interviews, interview stories and notes	Providing the service	contract	Until you delete it or the account is deleted. CVs, letters, applications, events, CV check results, analyses and rehearsal interviews are also deleted 24 months after their last change. Your profile, settings, search profiles and answers stay until the account is deleted. After you delete something, only a note that you deleted it stays for 30 days, so that it also disappears from your other devices
Screenshots of forms filled in by the extension (encrypted)	Showing you what the extension sent	contract	30 days
Text sent to OpenAI when you use an AI feature	Doing the task you ask for	contract	We do not keep it. OpenAI deletes it within 30 days at most
Log of AI and feature-limit use: which feature you used and when, without the content	Plan limits and the refund calculation when you withdraw from the contract (Terms, section 6.3)	contract, legal obligation, our legitimate interest	24 months, at most until the account is deleted
Filters for searching offers in our database (position, location, salary range and similar)	Finding matching offers	contract	We do not keep them
Saved job offers. Offers from a search are encrypted, apart from the title, company and link. Offers saved from the extension are kept in full, as they looked on the page	Your list of offers on all your devices	contract	Until you delete them or the account is deleted, at most 24 months from saving
Candidate card (if you publish one) and how many times it was shown	Letting recruiters find you	consent	Until the card or the account is deleted
Chats with recruiters: the content (encrypted) and who talks to whom and when	Chatting with recruiters	contract	6 months from the last message
Contact requests from recruiters	Letting a recruiter contact you	contract	Declined and expired ones are deleted 90 days after they expire
Sign-in sessions: time, IP address, browser	Keeping you signed in, the list of active sessions, account security	contract, our legitimate interest	Until the session expires, at most 30 days from its last use
CV links you share: the CV encrypted in your browser (the key is only in the link and never reaches us), the number of opens, the expiry date	Sharing a CV	contract	Until the link expires (90 days at most) or you turn it off, at the latest until the account is deleted
Plan and payments: plan, limit usage, customer and subscription numbers at Stripe, paid periods (plan, amount, currency, dates, withdrawal date), the setting for the limit-renewal e-mail. Stripe, not us, stores the card or BLIK used for renewals	Billing and plan limits	contract	Until the account is deleted. Numbers of payment notifications Stripe sends us: 90 days
Invoices (kept by Stripe)	Accounting and tax duties	legal obligation	5 years from the end of the tax year
History of acceptances of the Terms, confirmations that you read the Privacy Policy, your consents and their withdrawal, withdrawals from the contract and requests to start the service before the withdrawal period ends	Showing what you agreed to and when (GDPR article 5(2) and article 7(1)), defending against claims	legal obligation, our legitimate interest	Until the account is deleted, then 6 years, which is the limitation period for consumer claims. After the account is deleted, these entries no longer point to the account, only to its pseudonym
Analytics	Seeing which features work and which fail	consent (article 399 of the Polish Electronic Communications Law)	14 days
Visit statistics for the cvizo.com website: the page visited (of the address parameters only the campaign tag, such as utm_source), the page you came from (without address parameters), the page title, browser, operating system, device type, screen size, language, the country, region and city derived from the IP address, and a click on the link to create an account. We do not store the IP address	Counting visits and seeing where visitors come from	our legitimate interest	24 months
Google Analytics on the cvizo.com website, only with your consent: the pages visited (of the address parameters only the campaign tag), the page you came from (without address parameters), the identifier in a cookie, browser, operating system, device type, language, the approximate location Google derives from the IP address, scrolling to the end of a page, clicks on links to other sites, and a click on the link to create an account	Seeing where visitors come from and which pages they read	consent (article 6(1)(a) GDPR, article 399 of the Polish Electronic Communications Law)	2 months, cookies 13 months at most
Problem reports sent from the app	Answering and fixing the problem	our legitimate interest	24 months after the report is resolved, or after it was sent if we never resolved it. At the latest until the account is deleted
Reports about content and accounts from other users, moderation decisions, blocks	Handling reports, user safety	legal obligation (Digital Services Act), our legitimate interest	Reports and decisions: 12 months, also after the account is deleted, but no longer linked to it. A hidden card: until it is deleted or restored. Blocks: until the account is deleted
Record of our team’s decisions on reports, cards, accounts and withdrawals: who decided, when and about what, without the reasoning	Accountability for decisions, protection against misuse of access	legal obligation (Digital Services Act), our legitimate interest	12 months, also after the account it concerns is deleted
E-mails from us: address confirmation, password change, purchase confirmation with the Terms, failed payment, withdrawal confirmation, warning before account deletion, removed card, reports and moderation decisions, recruiter verification result, and on the free plan the notice that your limits have renewed (turn it off in Settings or with the link in the e-mail)	Running your account and information we have to give you	contract, legal obligation	We do not keep the content. The mail provider keeps it under its contract with us
Recruiter profile: company name, contact person, company website and description, message templates, saved searches, the offer description in a contact request	Letting recruiters contact candidates	contract	Until the recruiter account is deleted
Recruiter verification: country, NIP or EU VAT number, KRS number, name from the register, the register used, verification date, confirmed company address. We take the company name from the CEIDG, KRS or VIES register	Protecting candidates from fake recruiters	our legitimate interest	Until the recruiter account is deleted
Server log (we store the IP address without its last part)	Running and securing the service	our legitimate interest	14 days
Encrypted database backups	Restoring the service after a failure	our legitimate interest	14 days. Data of a deleted account stays in the backups until they are replaced by new ones

Our legitimate interest (GDPR article 6(1)(f)) is the security of accounts and of the service, protecting users from abuse and fake recruiters, handling your reports, deleting data of inactive accounts, and establishing and defending legal claims.

Giving us data is voluntary. Without an e-mail address and password (or signing in with Google or GitHub) you cannot create an account, and without data in your profile the app cannot prepare a CV for you.

Encryption

On your device we encrypt your profile, including your name and contact details, and also your CVs, cover letters, application history, rehearsal interviews and your Google access, if you connect it. We do not have the key to this data, so we cannot read it. If you lose both your password and your recovery code, nobody can recover this data (see Terms, section 4.3).

Artificial intelligence

AI features, such as writing CVs and cover letters, rating how well you fit an offer, answering form questions and rehearsal interviews, run on OpenAI. We send only the data a given task needs, usually your experience, skills, education and the offer text. We never send your e-mail address, phone number, home address, profile links or photo, and in some features we also hide your name and the names of your employers and schools.

We do not store the text sent to OpenAI or the answer. We record only which feature you used and when, because plan limits and any refund after a withdrawal depend on it. We keep this record always, also when you have not agreed to analytics.

OpenAI processes this data on our behalf under a data processing agreement. It does not train its models on the data. It keeps it for up to 30 days to detect abuse, then deletes it. It operates in the United States (see Transfers outside the EEA).

What the AI prepares is a suggestion. It reaches an employer when you send it yourself or when you start full automation (see Automated decisions).

Do not put information about your health, religion, political views, trade union membership or sexual orientation in your CV. We do not need it, and if it is in a CV you upload, the AI will read it along with the rest of the text.

Job search

Job offers are not ours. Employers and job boards publish them. Cvizo looks for them in three ways:

It searches our offer database. Every night we add public postings to it from the career pages of selected employers and from public job services. The app sends your search filters to the server, such as position, town, distance, work mode and salary range. We use them for that one search and do not store them. We do not send your profile data or the answers you prepare for employers (expected salary, start date, notice period, willingness to relocate).
The extension searches selected job boards in your browser, the way you would yourself. Your criteria then go only to the job board.
OpenAI’s search tool looks through public job pages on the internet. It gets your search criteria from us, without any profile data.

The AI compares the offers it finds with your profile (see Artificial intelligence). We save the results encrypted on your list of offers. Only the title, company and link stay readable.

The candidate card

You publish a card only if you want recruiters to find you. The card is not encrypted, because otherwise recruiters could not search it. That is why it has no name, photo, e-mail address, phone number or names of companies you worked for. It holds your skills, the positions and occupation you are interested in, your experience, location, work mode and hours, contract type, languages, availability, salary range, a short description, education and a general career summary (positions, years, industries).

You write the card’s description yourself and recruiters read it. Do not put anything in it that could identify you, or information about your health, religion or views.

You can have 1 card on Free, 2 on Pro and 3 on Max. A recruiter sees your name only when you accept their contact request. How cards are ordered in a recruiter’s results and how a card is assigned to an occupation category is described in Automated decisions.

Only verified recruiters can search cards. A recruiter confirms an e-mail address on their company’s domain, and we check the company in a public register: CEIDG or KRS in Poland, VIES in other EU countries. Verification confirms the company, but not the identity of a specific person.

What you write to a recruiter and the CV you send them, the recruiter processes on their own terms as a separate controller, and is responsible for it.

You can pause or delete your card at any time. Deleting your account also deletes the card.

Chat with recruiters

Message content, attached CVs and meeting invitations are encrypted on your devices and we cannot read them. We see who talks to whom and when, how many messages there are, whether they were read and whether a meeting was accepted.

Encryption does not protect your chats from someone who takes over your account together with your password. That person will see the whole chat history, older messages included.

A deleted message is removed from our server. We delete a chat in which nobody has written for 6 months. When you delete your account, all your chats disappear, also on the recruiters’ side.

Analytics

We turn analytics on only if you agree on the banner or in Settings → Privacy & Analytics. Without your consent we collect nothing.

We save your decision, with its date, on your account. It applies on every device and in every browser where you sign in, so we will not ask you again on another computer. You can withdraw consent in the same place in Settings, and from that moment we send nothing.

With your consent we collect which features you use and when something fails, for example which CV template you chose, what plan you have, or that an AI feature failed because a limit ran out. We do not collect CV or offer content, search terms, your name, e-mail address, phone number, IP address or screen recordings.

PostHog Inc. runs analytics for us on servers in Frankfurt and deletes the data after 14 days. Instead of your name or e-mail address, the data carries a pseudonym of your account. We could link it to your account, so it is not anonymous.

Statistics for the cvizo.com website

On the cvizo.com website (not in the app) we count visits with our own tool, which runs on our own server. This data goes to no one else.

The statistics store nothing on your device: no cookies and no browser storage, which is why we do not ask for consent. We do not store the IP address. We only derive the country, region and city from it. Visits from the same browser within a month are linked through a hash that the IP address cannot be read back from, and the hash changes every month. We do not link the statistics to an account in the app.

Before anything is sent, the page removes everything from the address except the campaign tag. An e-mail address pasted into a link to us therefore does not reach the statistics.

If your browser sends the “Do Not Track” signal, we do not count your visits at all. That is also a way to object to this processing. You can also simply write to us. We keep the statistics for 24 months.

Google Analytics on the cvizo.com website

If you choose “Accept” in the banner on cvizo.com, the website turns Google Analytics on. Without that consent nothing from Google loads and we send nothing to Google. You change your decision or withdraw consent with the “Cookie settings” button in the website’s footer. On withdrawal the website deletes the Google Analytics cookies.

Google Analytics stores the _ga and _ga_… cookies in your browser, with a random identifier that lets it recognise later visits from the same browser. They last 13 months at most. Google derives an approximate location from the IP address but does not store the address itself. We have turned off Google signals (linking with Google accounts) and ad personalisation. We remove everything from the page address except the campaign tag, the same as for the statistics on our own server. Besides the pages visited, Google Analytics records whether you scrolled to the end of a page and which links to other sites you clicked. We do not link Google Analytics to an account in the app.

Google Analytics is provided to us by Google Ireland Limited as a processor acting on our behalf. Data may go to Google LLC in the United States (see Transfers outside the EEA). Google keeps the detailed visit data for 2 months. We remember your decision in your browser for 12 months, then ask again.

Problem reports

We store the form from Settings → Report a problem in our database, where our team reads it. Along with your description we store technical data (the app version, your browser, the kind of page, your role and plan). We store an e-mail address for a reply only if you type one in yourself. We do not store your name, your account e-mail address, your CV or a screenshot.

We delete a report 24 months after it is resolved, or 24 months after it was sent if we never resolved it. Deleting your account also deletes all your reports.

The browser extension

The extension works on the job boards where you use it. It reads the offer from the open page and, when you ask, fills in the form with data from your profile. It can also take a screenshot of the filled-in form, which we keep encrypted for 30 days. Before sending applications in a series, it checks which job boards you are signed in to. It does not read your sign-in details while doing so and does not send them anywhere. It collects nothing on other sites.

Services you connect yourself

Google user data

This part covers the data Cvizo gets from your Google account when you sign in with Google or connect Google Calendar and Google Drive.

What we access and why

Signing in with Google gives us your e-mail address, your name and the link to your profile picture. We use them to create your account and sign you in.
Google Calendar: the app adds the events you create in Cvizo to your calendar, changes them and removes them. It does not read your other events.
Google Drive: the app saves an encrypted backup there and reads back only the files it created itself. It does not see your other files.
The e-mail address of the connected Google account, so the app can show you which account is connected.
We do not read your Gmail.

Calendar and Drive work directly from your browser. When you connect or disconnect, our server passes one-time sign-in data to Google and stores nothing.

Who we share it with

Calendar events and Drive files travel only between your browser and Google. They do not pass through our server and nobody else receives them.
We do not pass Google user data to any AI provider, OpenAI included, and we do not use it to develop, improve or train AI or machine learning models.
The e-mail address from Google sign-in becomes your account address, so it reaches the same companies as any account address, both acting on our behalf: Proton AG sends our e-mails to it, and Stripe receives it if you buy a plan (see Who else receives data).
We disclose Google user data to public authorities only when the law requires it.
We do not sell Google user data, do not use it for advertising and do not transfer or disclose it to third parties for purposes other than the ones described here.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we protect it

The access to your Google account that the app keeps (the sign-in tokens) is encrypted on your device with a key we do not have. We store only the encrypted form and cannot read it.
The Drive backup is encrypted on your device before it leaves it. Google and we see only an encrypted file.
Every connection between your browser, our servers and Google is encrypted (HTTPS).
Our servers are in the European Union. Only the people who run the service can access them, and database backups are encrypted.

How long we keep it and how to remove it

You can disconnect Google in the app’s settings at any time. The app then deletes the stored access, and we ask Google to remove it too. You can also remove it yourself at myaccount.google.com/permissions.
Deleting your Cvizo account deletes your e-mail address, name and the stored access.
Events and backups the app created stay in your Google account until you delete them there.

Other services

If you sign in with GitHub, GitHub gives us your e-mail address and name.

Data of people who do not have a Cvizo account

This section is for people whose data reaches us from someone other than themselves. We do not know their addresses, so we inform them here (GDPR article 14(5)(b)).

Who	What data and where from	What we do with it
People named in job postings, for example a recruiter to contact	Name and contact details, from public postings	In our offer database we hide e-mail addresses, phone numbers and profile links, and also names when the posting shows that the person is a contact. We do not change the employer’s name, even if it is the name of a sole trader. We delete a posting when it disappears from the source or its deadline passes. A posting a user saves from the extension is kept unchanged
People a user enters themselves, for example a referee in a CV	Data entered by the user	It is encrypted and we cannot see it, so contact the person who entered it about it

We process this data so that the user can run their own job search. The legal basis is our legitimate interest (GDPR article 6(1)(f)). The data may reach the companies listed in Who else receives data, including OpenAI in the United States (see Transfers outside the EEA). Each of these people can use the rights described in Your rights by writing to support@cvizo.com.

Who else receives data

These companies process data on our behalf under data processing agreements:

Company	What for	Where
Contabo GmbH	Application and database servers	European Union
OpenAI	AI features and searching for offers on the internet	United States
Stripe Payments Europe Ltd	Payments and invoices	Ireland and United States
PostHog Inc.	Analytics, only with your consent	European Union (Frankfurt)
Proton AG	Sending our e-mails	Switzerland
Cloudflare, Inc.	Sits between you and our sites, protects them from attacks and makes them load faster	Worldwide, including the United States
Google Ireland Limited	Google Analytics on the cvizo.com website, only with your consent	Ireland and the United States

Stripe also processes some payment data on its own behalf, for example to prevent fraud. It does so under its own privacy policy.

Apart from them, data goes to:

the CEIDG, KRS and VIES registers, when a recruiter verifies their company. We send only the NIP, KRS number or EU VAT number the recruiter gave,
verified recruiters, if you publish a card. They see its content, without your name and contact details,
recruiters whose contact request you accept. They get your name and what you send them,
employers and job boards you send an application to, yourself or through the extension. They process it on their own terms,
candidates you talk to as a recruiter. They see the company name, the contact person’s name and what you send them,
people you give a CV link to,
public authorities, but only when the law requires it.

We do not sell or rent personal data to anyone.

Transfers outside the EEA

OpenAI, Stripe, Cloudflare and Google may process data in the United States, outside the European Economic Area (EEA). PostHog keeps data in Frankfurt but is an American company, so we treat it the same way. We transfer data under the EU-US Data Privacy Framework if the company has joined it, and otherwise under the standard contractual clauses adopted by the European Commission. On request we will tell you which basis applies to which company and send you a copy of these safeguards.

Proton AG operates in Switzerland, which the European Commission has recognised as ensuring adequate protection of personal data.

Your rights

You have the right to:

get a copy of your data and take it to another service. In Settings → Account → Download your data you can download your account data and everything you create in the app, in one file that other programs can also read. For other data, such as invoices, write to us,
correct your data. You can change your profile in the app at any time,
delete your data. Settings → Account → Delete account deletes the account with everything linked to it and cancels your subscription,
ask us to restrict processing,
withdraw your consent to analytics or to publishing your card at any time, as easily as you gave it. Withdrawing consent does not change what we did before,
complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl) or to the data protection authority in the EU country where you live.

If you cannot do something yourself in the app, write to support@cvizo.com. We will answer within a month.

Deleting your account does not delete everything at once. Analytics data disappears by itself after 14 days. Stripe keeps invoices for as long as tax law requires. We keep moderation reports, the record of decisions and the consent history for the periods in the table, no longer linked to your account.

Right to object

If we process your data on the basis of our legitimate interest (“our legitimate interest” in the table), you can object to it on grounds relating to your particular situation. We will then stop processing that data, unless we have compelling legitimate grounds that override yours or need it to establish, exercise or defend legal claims (GDPR article 21). Send your objection to support@cvizo.com.

Automated decisions

We do not make decisions about you based solely on automated processing if they would have legal effects or a similarly significant effect on you (GDPR article 22).

The AI rating of offers sorts offers by how well they fit your profile. Only you see the result.

You can turn on full automation in your search settings or when you start sending. Only offers the AI rated at or above the threshold set in the search then qualify. You set the threshold yourself, and by default it is 50%. The app preselects offers from this list, you can untick them, and you start the sending yourself. The extension then fills in and sends the forms without showing them to you. You will find the sent applications in your application log. You can turn this mode off at any time.

If you publish a card, we place it in a recruiter’s results by how many of the searched skills it contains, and when that number is equal, by the date it was updated. The app also assigns the card to a general occupation category, such as “IT and software”, based on the occupation and positions you entered in it. Recruiters can filter results by this category. This is profiling, which you agree to by publishing the card. Your plan does not change the card’s position and nobody pays for a higher position. The recruiter decides whom to contact. You withdraw consent by pausing or deleting the card.

Cookies and browser storage

The app and the extension store in your browser only what they need to work: a cookie that keeps you signed in, settings such as language and theme, and data needed while you use the app, for example unlocked access to your data and the state of applications being sent. We do not need your consent for this (article 399 of the Polish Electronic Communications Law). We store the analytics identifier only after you agree to analytics. What the extension checks on job boards is described in The browser extension.

The cvizo.com website stores cookies only if you agree to Google Analytics (Google Analytics on the cvizo.com website). It remembers your decision about that, and the light or dark theme you choose, in your browser. We do not need your consent for this. The visit statistics on our own server store nothing on your device. They only check whether they were switched off by hand in the browser (Statistics for the cvizo.com website).

Age

Cvizo is for people aged 18 or older. You confirm this when you create an account. If you know that someone younger created an account, write to us and we will delete it.

Changes to this policy

The date at the top shows the last change. If a change concerns how we use your data, the app will show you the new version and ask you to read it. We will send earlier versions on request.

This policy is available in Polish and English. If they differ, the Polish version prevails.