What we store
We collect only what is necessary to provide the service:
- Account: Name and email (passwords are stored as an argon2 hash, never in plain text)
- CV content: Text, images and translations you enter yourself
- View statistics: Number of clicks on share links, with the IP address hashed (sha256)
We do not track movements on the web, and use no advertising cookies.
Where data is stored
All personal data is stored in Microsoft Azure, region Norway East. Data does not leave Norway for normal operations.
AI features run in Azure OpenAI – same subscription, same region.
Security and encryption
- In transit: HTTPS everywhere (SSL/TLS)
- At rest: 256-bit AES (Azure-managed)
- Passwords: Argon2id hashing
- Deletion tokens: SHA-256 hashed, short lifetime
AI and privacy
We use Azure OpenAI for CV parsing, translation and suggestions. The Azure service has a "no training" policy – your content is never used for training.
Sharing with others
We never sell data, and do not share it with third parties for marketing.
Share links you create yourself (e.g. cvdesign.no/r/abc123) show the CV to whoever opens the link. You can deactivate or password-protect such links anytime.
Deletion
You can at any time:
- Delete individual CVs (with versions and share links)
- Delete your entire account from Settings
Account deletion removes everything: CVs, versions, share links, statistics and Entra profile – within 24 hours. Backup copies in Azure may exist for up to 14 days before permanent deletion.
Export and data portability
Download your CVs as JSON from the editor (the "JSON export" button under "More"), or as PDF via the share button. You own the data fully.
Contact
Questions about privacy or a request for access/deletion? Send to post@cvdesign.no or via the contact form.
Data controller: CVdesign · Norway