Privacy & Data
GDPR Compliance
TryCVForge is built to respect your privacy and comply with the EU General Data Protection Regulation.
The General Data Protection Regulation (GDPR) gives individuals in the European Economic Area strong rights over their personal data. We designed TryCVForge to honor those rights for everyone, wherever you are. This page explains the rights you have, the lawful basis on which we process your data, and how to make a request.
Your rights under GDPR
Right to access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Delete your account and associated personal data — the “right to be forgotten”.
Right to portability
Receive your data in a structured, machine-readable format.
Right to restriction
Ask us to limit how we process your data in certain cases.
Right to object
Object to processing based on our legitimate interests.
Our lawful basis for processing
Contract
We process your account and document data to provide the service you signed up for.
Consent
Optional processing (such as marketing emails, if any) happens only with your explicit consent, which you can withdraw at any time.
Legitimate interest
We process limited data to secure the platform, prevent abuse, and improve the service — balanced against your rights.
Legal obligation
We retain certain billing records where required by law.
International data transfers
Where data is processed outside the EEA (for example by our payment or AI providers), we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your data remains protected.
Data processors
We work with a small number of trusted processors — including LemonSqueezy for payments and our AI provider for writing suggestions — each bound by data protection agreements.
How to make a request
You can exercise most rights directly from your account settings — including exporting or deleting your data. For any other request, email privacy@trycvforge.com. We respond to verified requests within 30 days, as required by GDPR. You also have the right to lodge a complaint with your local data protection authority.
See also our Privacy Policy and Terms of Use.