Legal
Privacy Policy
Last updated: 4 August 2026
Controller
CVumi
Erna-Eckstein-Straße 3, 81245 München, Germany
Email: privacy@cvumi.com
1. Overview
CVumi is a desktop application that runs locally on your computer. Your CVs, job descriptions, and generated documents are stored on your device. We do not receive or store the content of your CVs or job applications.
2. Data We Process
| Data | Purpose | Legal basis |
|---|---|---|
| Payment and billing data | Processed by Lemon Squeezy to complete the purchase and issue invoices | Contract performance (Art. 6(1)(b) GDPR) |
| Email address (from purchase) | Deliver the licence key and provide customer support | Contract performance |
| Optional email for product updates | Inform you about new features or important updates | Consent (you can unsubscribe at any time) |
| Feedback, reviews, feature requests | Improve the product | Consent or legitimate interest |
| Technical logs related to licence activation (if any) | Prevent abuse of licence keys | Legitimate interest |
| Website usage data (pages visited, clicks, device type, referrer) | Understand how the website is used and improve it (PostHog, EU-hosted). Collected only if you accept analytics | Consent (Art. 6(1)(a) GDPR), withdrawable anytime via “Cookie settings” in the footer |
We do not collect the content of your CVs, cover letters, job postings, or the API keys you use.
3. Payment Processing
Payments are processed by Lemon Squeezy (Merchant of Record). Lemon Squeezy processes your payment and tax information according to their own Privacy Policy. We receive only the information necessary to deliver your licence and provide support.
4. Third-Party Services We Use
- Lemon Squeezy — payment processing and licence delivery
- Cloudflare — website hosting and licence validation edge
- Resend — transactional and optional update emails
- PostHog (EU) — privacy-focused website analytics, hosted in the EU (Frankfurt), active only after you consent
These providers process data only as necessary to provide their services to us and under appropriate data processing agreements where required.
5. Data Retention
- Purchase-related data: retained as required by tax and commercial law
- Optional marketing emails: until you unsubscribe or request deletion
- Feedback: retained only as long as needed for product improvement
6. Your Rights (GDPR)
You have the right to access, rectify, erase, restrict processing, and data portability, as well as the right to object and to lodge a complaint with a supervisory authority (in Germany: the Bavarian Data Protection Authority or the authority of your place of residence). To exercise your rights, contact us at privacy@cvumi.com.
7. International Transfers
Where data is processed outside the EU/EEA, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.
8. Changes
We may update this Privacy Policy from time to time. The current version will always be available on our website.
9. Contact
CVumi
Erna-Eckstein-Straße 3, 81245 München, Germany
Email: privacy@cvumi.com