Privacy policy
Last updated : 7/22/2026
CVATS respects your privacy. This policy explains, clearly and transparently, what data we collect, why we collect it, and how you can exercise your rights. It is written in line with the European General Data Protection Regulation (GDPR, EU 2016/679).
1. Data controller
The data controller is Guillaume Ortin, publisher of the CVATS website (cvats.io). For any question about your personal data : contact@cvats.io.
2. Hosting
The CVATS website is hosted by Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, USA). Vercel applies advanced security standards and is GDPR-compliant for data transfers.
3. Data stored locally in your browser
The information you enter in your resume (name, email, phone, work experience, education, skills, languages, photo) is stored exclusively in your browser's localStorage. This data is never sent to our servers ; we have no access to it. You can erase it at any time using the "Reset" button in the editor or by clearing your browser's local storage.
4. Cookies and analytics
Subject to your explicit consent (cookie banner on first visit), we use four categories of cookies : essential (always on, required for the site to function), analytics (Google Analytics 4 with anonymised IP to measure traffic), performance (optimisation and personalisation) and advertising (conversion tracking and affiliate). You can accept, decline or customise your choice at any time, and revoke your consent by clearing your browser cookies.
5. Contact form
The contact form opens your default mail client (mailto:) with a pre-filled email addressed to contact@cvats.io. The data you enter (name, email, subject, message) does not transit through our servers : it is sent directly from your own mailbox. Once received, these emails are kept for a maximum of 3 years after the last exchange, then deleted.
6. Your rights
Under the GDPR you have the right to access, rectify, erase, port, oppose and restrict the processing of your data. You may also withdraw your consent at any time. To exercise these rights, write to contact@cvats.io : we reply within a maximum of 30 days from the date your request is received.
7. Security
The entire site is served over HTTPS (TLS encryption). Because no resume data is stored server-side, the risk of mass leaks is structurally very low. We follow OWASP security recommendations for the application and Vercel best practices for the infrastructure.
8. Changes to this policy
We may update this policy to reflect technical, legal or product evolutions. The "Last updated" date at the top of this page indicates the version in force. In case of a major change, a clear notice will be shown to you on your next visit.
9. Contact
For any question about your data or this policy, write to contact@cvats.io. We commit to a fast and transparent reply.