Privacy policy

Last updated: April 6, 2026

1. Data controller

Verrilux.ch SARL, a Swiss company, is responsible for processing your personal data as part of the SpeedCV service. For any questions, contact us at: privacy@kandidat.cv

2. Data collected

We collect the following categories of data:

  • Account data: name, email, country, language (via Clerk)
  • CV data: contact details, experiences, education, skills you enter
  • Payment data: processed by Stripe, we do not store your banking data
  • Usage data: pages visited, actions performed (with your consent)
  • AI data: your CV text is sent to our AI providers for enhancement

3. Purposes and legal bases

  • Service provision (contract execution): CV creation and export
  • AI enhancement (consent): generating AI suggestions
  • Payment (contract execution): subscription management via Stripe
  • Analytics (consent): understanding service usage

4. Sub-processors

Your data may be processed by the following sub-processors:

  • Clerk (authentication) — United States, DPA signed
  • Stripe (payments) — United States, PCI DSS, DPA signed
  • Neon/Supabase (database) — EU, DPA signed
  • Anthropic (Claude AI) — United States, terms of service
  • OpenAI (GPT AI, fallback) — United States, DPA signed
  • Vercel (hosting) — United States, EU Edge available, DPA signed
  • Cloudflare (file storage) — Global, DPA signed

5. International transfers

Some sub-processors are based in the United States. These transfers are governed by the Swiss-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs).

6. Your rights

Under the nFADP (Switzerland) and GDPR (EU), you have the following rights:

  • Access: obtain a copy of your personal data
  • Rectification: correct your data via the editor or settings
  • Erasure: delete your account and all your data
  • Portability: export your data in JSON format
  • Objection: disable AI suggestions in settings

To exercise these rights: privacy@kandidat.cv or via Settings > Delete my account.

7. Data retention

  • Account data: retained as long as the account is active
  • CVs and letters: retained as long as the account is active, deleted upon closure
  • Payment data: 10 years (legal accounting obligation)
  • Usage logs: 90 days

8. Cookies

We use necessary cookies for the site to function. Analytics and marketing cookies are subject to your consent via our cookie banner. cookie policy.

9. Contact and complaints

Data protection officer: privacy@kandidat.cv
Supervisory authority (Switzerland): FDPIC — edoeb.admin.ch
Supervisory authority (France): CNIL — cnil.fr