*This is an English translation of the German Datenschutzerklärung. If the two differ, the German version applies.*
This policy says which data we process, why, for how long, and who else sees it. It applies to cvscored.com and the application at https://cvscored.com/app.
Raghuram Kalyanam
Frankenstr. 30
67292 Kirchheimbolanden
Deutschland
Email: raghuramkalyanam@gmail.com
The service is run by one person. No other staff see your data.
Everything we do with your data serves to improve your application documents. For that we work with the text of your CV and of the job postings, not with your personal contact details. Name, email address, phone number, postal address, profile links and date of birth are removed before any processing by a language model.
Only to run and improve the service itself do we look at combined numbers (see section 5). We do not sell data, show no advertising, and pass your profile to no one.
| Data | Where from | What for |
|---|---|---|
| Email address, password (as a hash only), language, country | You, when you sign up | Account, sign-in, interface language |
| Name and contact details for your documents | You, or read from your CV | The header of your CV and cover letter |
| CV: text, sections, translations | You, by upload, paste or edit | The basis of every assessment and document |
| Job postings | You, by paste or link; for a link we read the public page | Matching against your CV |
| CV and job posting for the free check | You, on the landing page, without an account | A result and an account without entering them again (section 4) |
| Generated documents (PDF) | Us, from your CV | For you to download |
| Notes, answers, interview questions | You | Preparing your applications |
| Answers to the onboarding questions and to surveys | You, voluntarily | Improving the service (section 5) |
| Bug reports you send us, with a screenshot only if you agree | You | Finding and fixing the reported bug |
| Messages to us | You | Answering your question |
| Model calls: time, model, cost | Us, while running the service | Traceability and cost control |
| Technical logs and counters | Us, while running the service | Security and protection against abuse |
We do not intentionally process special categories of personal data under Art. 9 GDPR. A CV may contain details that hint at them; we do not evaluate them, and the models are told not to use them.
contract, Art. 6(1)(b) GDPR.
GDPR.
screenshot is used.
GDPR.
The free CV check. On the landing page you can have a CV and a job posting checked without an account. This is a step you ask for before a contract with us, Art. 6(1)(b) GDPR. For it:
and the findings, the language and the time.
hours at most, so you can open the link in the email on another device too. After that the check is deleted.
usual cycle.
becomes an application there; the check row is deleted. Nothing is kept twice.
storage on its side.
add them; we do not look for them and do not evaluate them.
To understand who uses the service and what should improve, we look only at combined numbers: for example how many people from which country, in which field or with how many years of experience use it. Groups of fewer than five people are not shown on their own, so no one can be identified. Test accounts and deleted accounts are not counted. You can object to this at any time (section 10).
We read bug reports to fix them. For that we use the text of the report without your contact details and, only with your consent, the screenshot.
We use the following service providers. They process data only on our instructions.
Agreement under Art. 28 GDPR concluded on 2026-10-07; transfer basis: EU-only. Storage of request and answer content: organisationsweit aktiv. Usage metadata is still stored: model, token count, cost, duration, status – no request or answer content.
Agreement under Art. 28 GDPR concluded on 2026-10-07; transfer basis: EU-only.
Agreement under Art. 28 GDPR concluded on 2026-10-07; transfer basis: EU-only.
Agreement under Art. 28 GDPR concluded on 2026-10-07; transfer basis: SCC. Storage of request and answer content: keine Speicherung und kein Training (laut Requesty, nur solche Modelle zugelassen).
Agreement under Art. 28 GDPR concluded on 2026-10-07; transfer basis: SCC. Storage of request and answer content: keine Speicherung und kein Training (laut Requesty, nur solche Modelle zugelassen).
Part of the processing takes place outside the EU. For these recipients: SCC. Where there is no adequacy decision of the European Commission, we rely on the Commission's standard contractual clauses.
| Data | Period |
|---|---|
| Account | until you delete the account; an account without a login for 2 years is deleted after two email reminders |
| CV | as the account |
| Generated documents | until rebuilt, deleted or the account is deleted |
| Free CV check | 24 hours, 48 at most if you started a sign-up |
| Model calls | details 7 days, daily totals 13 months |
| Bug reports | until the reported bug is handled, at most as the account |
| Logs | server logs rotate by size and are overwritten after a few days |
| Backups | 30 days |
When you delete your account, its data is deleted. A deleted row can remain in a backup until the period above ends.
| Name | Purpose | Period |
|---|---|---|
matcher_session | keeps you signed in | 30 days, or until you sign out |
matcher_visitor | protects forms and serves security | 30 days |
matcher_lang | remembers the language you chose (visitors without an account) | 1 year |
matcher_check | finds your free CV check again so you can sign up without entering the CV and the job twice; cleared by "Delete my check now" | 24 hours |
These cookies are technically necessary or store a setting you chose yourself (§ 25(2) no. 2 TDDDG). In your browser's local storage (not on our server) we also remember your choices in the interface: rk-view, rk-folder, rk-dash-sort, rk-onb-at, rk-onb-later, rk-coach-skipped, rk-app-cards and landing-country. They stay until you clear your browser's site data.
For security we also store, only as a hash (never in plain text), the network range of your sign-in for 90 days and the id of the matcher_visitor cookie for 13 months, to limit abuse (legitimate interest, Art. 6(1)(f) GDPR); both are deleted with the account. We use no analytics or advertising cookies. If analytics is ever added, we ask first.
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw consent at any time. In the application you can download everything we hold about you as one file: your CVs, the documents we built, your applications, answers, notes, photo, signature and invoices, with a page explaining each part. You can also delete your account there yourself, or download your data first and then delete the account. For anything else, write to raghuramkalyanam@gmail.com.
You can complain to a data protection supervisory authority. Responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34, 55116 Mainz
Your CV and the job posting are sent to a language model so that the assessment and the documents can be written. For this:
profile links and date of birth do not leave our system.
family.
Art. 22 GDPR. You decide what you send.
Passwords are stored only as hashes, the connection is encrypted, backups are kept encrypted outside the server, and access to the database is limited to the application.
We update this policy when the processing changes. The version you accepted when you signed up is recorded in your account.
Version 2026-10-05, valid from 2026-10-08.