← Back to Votro

Privacy Policy

Last updated:

This policy explains what personal data Votro ("we", "us") collects when you use the Votro web app, why, who we share it with, and what rights you have over it. Votro is operated as Votro (unincorporated). Contact us about privacy at fellipeutaka@gmail.com.

1. What we collect

Account details (email, name), the LaTeX CVs and job descriptions you upload or paste, tailored CV output, compiled PDFs, and your application-tracking records (job stages, outcomes).

2. Purpose and legal basis

We process this data to perform the contract with you: tailoring your CV to a job description, compiling it to PDF, and tracking outcomes (Art. 6(1)(b) GDPR — performance of a contract). We do not rely on consent for this core processing.

3. Who we share it with (recipients)

  • Cloudflare — hosting, database, and object storage for your account data, CVs, and compiled PDFs.
  • OpenRouter and the downstream AI model providers it routes to — your CV text and job description are sent to an AI model to produce a tailored draft. We restrict routing to providers that neither retain nor train on this data (see §6).
  • Paddle — our merchant of record, handling billing and payment processing.

4. International transfers

Where these recipients process data outside your country, transfers are covered by Standard Contractual Clauses. Cloudflare is additionally certified under the EU-U.S. Data Privacy Framework. Contact us at fellipeutaka@gmail.com for a copy of the applicable safeguards.

5. Retention

We keep your CVs, job descriptions, tailored output, and application-tracking records while your account is active. When you delete your account, this data is erased immediately from our primary database and object storage; any remaining copies in short-lived backups age out within 30 days. Billing and ledger records are kept only where legally required (e.g. tax).

6. AI processing safeguards

CV-tailoring requests to OpenRouter are sent with data collection denied, restricting routing to model providers that do not retain or train on your inputs and outputs.

7. Cookies

We use only strictly necessary cookies — no analytics or marketing trackers:

  • session — keeps you signed in.
  • oauth_state — short-lived (10 minutes) CSRF protection during sign-in with Google or GitHub.
  • oauth_code_verifier — short-lived (10 minutes) PKCE verifier for the Google sign-in flow.

Because we use no analytics or marketing cookies, no cookie consent banner is shown. If that changes, we'll add one.

8. Automated decision-making

Votro's AI tailoring produces a draft you review and edit — it is user-directed drafting, not automated decision-making or profiling that produces legal or similarly significant effects about you.

9. Your rights

You have the right to access, rectify, erase, restrict, or object to the processing of your data, and to receive it in a portable format. You can exercise most of these yourself in Settings: download a copy of your data (access/portability) or permanently delete your account (erasure). For anything else, contact us at fellipeutaka@gmail.com. You may also lodge a complaint with your local data protection authority.

10. Providing your data

Providing your CV and job descriptions is required to use Votro's core tailoring feature — without it, we can't generate a tailored CV for you.

11. Sensitive data

Please don't include health, religious, union-membership, or other special-category data in your CV or job description unless it's already something you'd share with an employer. See our Terms of Service for details.