Data controller: [handelsnaam], [adres]. Privacy contact: [e-mail].
Once the details are filled in, this text replaces the draft.
Audio recording you make in the browser (optional); its text transcript.
Profile data you provide or confirm: name (Latin script), city, phone, email, target job, experience, education, languages, skills.
Order data: order ID, chosen CV language, status, timestamps, consent date and text version.
Contact you leave with a question, and technical data (IP address, server logs for security).
We do not ask for a BSN and ask you not to include special-category data (such as health or religion) in the CV.
Recording and transcribing voice — your consent (Art. 6(1)(a)): recording does not start without the consent checkbox; consent can be withdrawn anytime (delete button or email).
Creating and delivering the CV — performance of a contract (Art. 6(1)(b)): free service at your request.
Security, abuse prevention, debugging — legitimate interest (Art. 6(1)(f)).
Financial administration — legal obligation (Art. 6(1)(c)), only if a paid mode is enabled.
No decisions with legal effects based solely on automated processing: you review and correct the profile in the form before the CV is generated.
OpenAI (USA) — speech recognition (whisper) and wizard-question voiceovers; transfer outside the EEA.
xAI (USA) — structuring and polishing the CV text (grok); transfer outside the EEA.
Telegram Bot API — service notifications to the owner (order ID, your contact, status); your contact is seen by Telegram and the owner.
Reactive Resume (self-hosted, same server in the EU) — PDF generation.
Hosting — server in the EU (rag, Netherlands), SQLite database, TLS encryption.
For transfers outside the EEA the European Commission's standard contractual clauses and/or an adequacy decision (e.g. the EU-US Data Privacy Framework) apply where relevant. We do not sell data and do not use it for advertising.
Orders (transcript, profile, PDF, preview) — 90 days, then automatically deleted by the server. Counted from creation.
Deleted earlier on your request — via the “Delete my data” button in the app or an email to [e-mail].
Financial records — 7 years (legal), only if there was a paid mode. Server logs — [30] days.
TLS encryption, restricted server access, API keys outside the code. We do not store full payment/bank details.
Access, rectification, erasure, restriction, objection and data portability. Request via [e-mail] or the in-app button; we reply within one month.
Complaint — to the Autoriteit Persoonsgegevens: https://www.autoriteitpersoonsgegevens.nl.
No tracking or advertising cookies — no cookie banner is needed.
Page language and consent state stay only in your browser (localStorage) and are never sent to us.
The landing page is static and makes no external requests.
The service is for people aged 16 and over. We do not knowingly process data of children under 16.
The current version is always here. Current text version: 2026-10-29-draft.
voiceresume.online · app · privacy