Legal

Privacy Policy

Last updated: August 05, 2026

Privacy Policy

Company: Aura Digital B.V.
Product: CV Machine AI
Registered address: De Entree 201, 1101 HG Amsterdam, The Netherlands
Company registration number: 53180712
Email: help@cvmachineai.com
Phone: +31 970 1020 6459
Website: https://cvmachineai.com

1. Introduction

Aura Digital B.V. (“we”, “us”, “our”) operates CV Machine AI, an online, AI-powered service for creating, reviewing, and improving CVs. We sell digital goods only — no physical products are supplied.

We are committed to protecting your personal data and comply with applicable data protection law, including the EU General Data Protection Regulation (GDPR) and Dutch implementing legislation. Aura Digital B.V. is the controller of the personal data described in this policy.

2. Personal Data We Collect

We only collect the data reasonably necessary to provide and secure the service.

Information you provide:

  • Full name
  • Email address
  • Billing address and country of residence
  • CV content and any information you choose to include in it
  • Account preferences and support communications
  • Transaction and order details

Payment information: We accept payment via card and other methods offered at checkout, processed through PCI-DSS compliant payment providers. We do not store full card numbers, CVV/CVC codes, or equivalent wallet credentials — we only receive transaction confirmation and limited payment metadata (e.g. card type, last four digits, approval status) needed to manage your subscription and resolve disputes.

Automatically collected information:

  • IP address
  • Browser and device type
  • Pages visited and general usage data
  • Date and time of access

This is used for security, fraud prevention, service reliability, and analytics.

3. How We Use Personal Data

We use personal data to:

  • create and manage your account and subscription;
  • process payments, renewals, cancellations, and refunds;
  • deliver and improve the CV Machine AI service;
  • provide customer support;
  • prevent fraud, abuse, and unauthorized access;
  • manage billing disputes and chargebacks with payment providers;
  • comply with legal and tax obligations; and
  • send you service-related communications (e.g. confirmation of purchase, trial-conversion reminders, changes to these terms).

We do not sell your personal data.

Marketing communications: Where we send marketing or promotional communications (as opposed to essential service and billing notices), we do so only with your consent or another valid legal basis, and you can opt out at any time using the unsubscribe link in the message or by contacting us. Opting out of marketing does not affect the service-related communications necessary to operate your subscription (e.g. renewal or cancellation confirmations).

4. AI Processing of Your Content

Your CV content is processed by AI systems to generate suggestions, formatting, and improvements. Unless you separately opt in, we do not use your CV content to train or improve underlying AI models; it is used only to deliver the output you requested. If this ever changes, we will update this policy and, where required by law, obtain your consent first.

We process personal data based on:

  • Contractual necessity — to provide the service you’ve subscribed to;
  • Legal obligation — e.g. tax, accounting, and consumer-protection record-keeping;
  • Legitimate interest — fraud prevention, service security, and improving reliability, balanced against your rights; and
  • Consent — for optional marketing communications and any non-essential cookies.

6. Cookies

CV Machine AI uses a limited set of cookies:

  • Session cookie — keeps you logged in while using your account; expires automatically after 24 hours.
  • Security cookie — helps verify that form submissions and login attempts are legitimate.

These are strictly necessary for the site to function securely and are not used for advertising or cross-site tracking. If we ever introduce optional analytics or advertising cookies, we will ask for your consent first via a cookie banner and let you manage your preferences at any time. You can also control or delete cookies through your browser settings, though this may affect parts of the site’s functionality.

Fonts: Website fonts are served from our own servers rather than a third-party font provider, so no additional data is sent to external font services when you load our pages.

7. Data Retention

We keep personal data only as long as necessary:

  • for the duration of your account/subscription relationship;
  • as required by applicable tax, accounting, and consumer-protection laws (including proof of consent to recurring billing, kept for as long as needed to resolve any dispute or chargeback); and
  • as necessary to resolve open support requests or disputes.

When data is no longer needed for these purposes, we delete or anonymize it.

8. Data Security

We apply appropriate technical and organizational measures, including:

  • SSL/TLS encryption in transit;
  • secure hosting and access controls limiting internal access to personal data;
  • PCI-DSS compliant payment processing; and
  • regular review of our security practices.

No system is completely secure, but we work to protect your data against unauthorized access, loss, or misuse, and will notify you and, where required, the relevant supervisory authority in the event of a data breach affecting your rights.

9. Who We Share Data With

We share personal data only where necessary, with:

  • payment processors, to process transactions and manage chargebacks;
  • hosting and IT service providers, to operate the platform securely;
  • professional advisors and authorities, where required by law; and
  • payment networks/card issuers, with relevant transaction, consent, and cancellation records, when responding to a billing dispute.

We do not sell personal data to third parties, and we require any service provider handling personal data on our behalf to protect it under a data processing agreement.

10. International Data Transfers

Where personal data is transferred outside the EU/EEA, we use appropriate safeguards recognized under GDPR, such as the European Commission’s Standard Contractual Clauses (SCCs), to ensure your data continues to receive an equivalent level of protection.

11. Your Rights

Subject to applicable law, you have the right to:

  • access the personal data we hold about you;
  • correct inaccurate data;
  • request deletion of your data;
  • restrict or object to certain processing;
  • receive a copy of your data in a portable format; and
  • withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.

To exercise any of these rights, email help@cvmachineai.com from the address associated with your account. We will respond within a reasonable timeframe and in any event within the period required by law.

You also have the right to lodge a complaint with a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) — or with the data protection authority in your own EU/EEA country of residence.

12. Children

CV Machine AI is not directed at, and may not be used by, anyone under 18. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time for legal, security, or operational reasons. We’ll post the revised policy with an updated effective date, and where a change is material, we’ll take reasonable steps to notify you directly.

14. Contact Us

Aura Digital B.V.
De Entree 201, 1101 HG Amsterdam, The Netherlands
Email: help@cvmachineai.com
Phone: +31 970 1020 6459
Website: https://cvmachineai.com

Back to Home