Where cvharbor stores your CV, and what the AI agreement covers
Your account and CV stay on cvharbor’s own server in the European Union. AI features are the exception: that text is sent to a named processor under a contract, and it is not used to train their models.
This page repeats claims that are already on the privacy notice, in shorter form, so they can be quoted. If the two ever disagree, the privacy notice wins.
The CV itself
Account data and CV documents are stored on cvharbor’s own server in the European Union. They are not kept on a third-party cloud object store. You can delete documents in the product. Deleting the account removes the live database copy.
When you use AI
Import, tailoring, cover letters, and job matching send the text those features need to OpenAI Ireland Ltd., Dublin. The legal basis for that processing is Art. 6(1)(b) GDPR: providing the service you asked for. cvharbor has a data processing agreement with OpenAI under Art. 28 GDPR. Where that processing happens in the United States, the agreement includes the EU Standard Contractual Clauses.
Data sent through the OpenAI API is not used to train OpenAI’s models. OpenAI may keep it for up to 30 days to detect abuse, then delete it, as described in the privacy notice.
What this does not promise
- It is not a claim that every subprocess stays in the EU. Email, payments, error reporting, and the CDN are separate processors, listed on the privacy page.
- It is not a certification, a seal, or a guarantee of a particular hiring outcome.
- It is not legal advice for your employer’s applicant-tracking system. Their storage is their notice, not this one.
The full notice, including retention and the subprocess list: Privacy