How we protect your data
A CV holds your work history and contact details. This page says plainly how we look after it, and nothing we cannot stand behind.
Encrypted connections
Every page, upload and payment on ai-vitae.store travels over HTTPS (TLS 1.3). Nothing you send us crosses the internet unencrypted.
Where your data lives
Orders and your documents are stored in the EU (Frankfurt) with a database provider that encrypts data at rest. Orders are processed on our own server in Germany, reachable only by key-based login, with password login switched off and a firewall that admits only web traffic and those key-based logins.
Payments by Stripe
You pay on Stripe’s checkout page. Your card details go to Stripe, not to us: we never see or store them.
Who can see your CV
Ai-Vitae is run by its founder, who is currently the only person with access to customer data. Access to our systems is protected by multi-factor authentication. If we hire, anyone given access will be background-checked and sign a confidentiality agreement first.
Backups and reviews
Our processing server is backed up every night and each backup is kept for seven days. Once a month we run a security review of the server, the website and the software it depends on.
Kept only as long as needed
Your CV files and documents are deleted on a fixed schedule after delivery, and interview transcripts within days of your report. You can ask for a copy of your data, a correction or deletion at any time.
AI processing
Your CV and job description are processed by AI providers (Anthropic and OpenAI) to write and check your documents. They process it under their business API terms, and neither uses it to train their models. Which provider does what, and under which safeguards, is listed in our Privacy Policy.
Your rights
Under the GDPR and UK GDPR you can ask for a copy of your data in a portable format, have it corrected or deleted, or object to how it is used. Email orders@ai-vitae.store. Retention periods and the full list of your rights are in the Privacy Policy.
If something goes wrong
If a personal data breach puts your rights at risk, we will report it to the Data Protection Commission within 72 hours of becoming aware of it, and tell you directly without undue delay where the risk to you is high, as the GDPR requires.
Report a security issue
Found a vulnerability or something that looks wrong? Email orders@ai-vitae.store with “Security” in the subject and the details. Please give us a reasonable chance to fix it before telling anyone else.
Last Updated: 20 October 2026