C
CV Maker
Hugo Software

Privacy Policy

Last updated: 29 August 2026

CV Maker (cv.bnj.app) is operated by Hugo Software. This page explains, in plain terms, what happens to your data.

The short version

Your CV never reaches us. Everything you type into CV Maker — your name and contact details, your employment history, education, skills, languages, any extra sections and any job posting you paste for the keyword comparison — is processed entirely inside your web browser. There is no endpoint on our servers that accepts CV data. This is a property of how the tool is built, not a promise about how we behave.

What stays in your browser

The following is stored in your browser's local storage on your own device, and nowhere else:

  • the CV you are currently editing (so you do not lose it when you close the tab);
  • the job posting you pasted, if any;
  • the CV archive (a Pro feature);
  • your interface language, light/dark preference and, if you have one, your licence code.

Clearing your browser's site data deletes all of it permanently. We cannot restore it, because we never had a copy. A second computer or a different browser starts empty.

What our server stores

The only thing our backend keeps is a licence record, created when a subscription starts:

  • the licence code (format BNJ-XXXXXXXX);
  • the subscription status, plan, Stripe price id, current period end and which apps the licence covers;
  • the Stripe customer id.

There are no accounts, no passwords and no email addresses. We deliberately do not store your email address, even though Stripe collects one for billing.

Payments

Payments are handled by Stripe. Card details are entered on Stripe's own checkout page and never pass through our servers. Stripe processes that data as an independent controller under its own privacy policy (stripe.com/privacy). We receive only the identifiers listed above.

Analytics

We use a self-hosted installation of Umami (uma.bnj.app) to count page views. It is cookieless, collects no personal data and no cross-site identifiers, and stores aggregate figures only: page views, referrer, country, browser and device type. It cannot see anything you type into the CV.

What we do not do

  • No advertising SDKs, no third-party trackers, no data brokers.
  • No selling or sharing of personal data.
  • No requests to Google Fonts, CDNs or any other third-party host — the page and its fonts are served from our own domain.
  • No profiling and no automated decision-making. The "ATS check" runs in your browser on your own text and sends nothing anywhere.

Legal bases (GDPR / KVKK)

Where the GDPR or Turkish KVKK applies, we rely on: performance of a contract for the licence record required to give you access to Pro, and legitimate interest for cookieless aggregate analytics and for keeping the service secure and operational.

Your rights

You may ask us what licence data we hold, ask for it to be corrected, or ask for it to be deleted. Because a licence code is the only identifier we have, please quote it in your request. Deleting the licence record ends access to Pro on that code. Data stored in your browser is under your own control and can be removed at any time by clearing site data for cv.bnj.app.

Children

CV Maker is a tool for job seekers and is not directed at children under 16.

Retention

Licence records are kept while the subscription is active and for as long as we are required to keep billing records afterwards. Analytics data is aggregate and kept indefinitely in that aggregate form.

Changes

If this policy changes, the date at the top of this page changes with it.

Contact

Questions or requests: [email protected]