Privacy
Privacy Notice
This notice explains what VexisLabs processes when you use SignatureCV and what stays on your own device.
1. Controller
VexisLabs is the controller for SignatureCV, KVK 42082794, VAT NL005481639B07, based in Westervoort, the Netherlands. Privacy requests can be sent to [email protected].
2. Data stored on your device
CV content, cover letters, saved vacancies and application-tracker entries are currently stored locally in your browser. They are not sent to our server merely because you type them. They leave your device only when you intentionally use a network feature that clearly says so, contact support, or make a payment. Clearing browser storage can permanently remove this data, so export backups you need.
3. Data we process
We may process technical request data such as IP address, timestamps, requested pages, device/browser information and security signals; access-period and payment identifiers, payment status, billing contact details and limited transaction metadata received from Stripe; support messages; and records needed to meet tax, accounting, fraud-prevention and legal obligations. We do not receive your full card number or online-banking credentials.
4. Purposes and legal bases
We process data to provide the paid-access contract, operate checkout, refunds and access recovery, secure and troubleshoot the platform, answer support requests, prevent misuse, comply with accounting and legal obligations, and improve the service using necessary operational information. The legal bases are contract, legal obligation and our legitimate interests in security and reliable operation. We ask for consent where the law requires it.
5. Recipients and international transfers
Stripe processes one-time payments, payment status and access recovery information. Cloudflare provides content delivery, security and the encrypted connection to our server. Hosting and professional advisers may process limited data where necessary. These providers act under their own terms and, where applicable, processing agreements. Transfers outside the EEA use an adequacy decision or appropriate safeguards such as standard contractual clauses.
6. Retention
Operational security logs are normally kept for up to 30 days unless an incident requires longer retention. Support correspondence is normally kept for up to 24 months after resolution. Transaction and accounting records are kept for the legally required period, generally seven years in the Netherlands. Browser-stored workspace data remains until you clear it. We may retain evidence of consent, cancellation and disputes as needed to establish legal claims.
7. Your rights
Depending on the law that applies, you can request access, correction, deletion, restriction, portability or objection, and withdraw consent without affecting earlier processing. We may need to verify your identity. You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.
8. Security and children
We use proportionate technical and organisational measures, including encrypted transport and signed payment events. No online system can be completely risk-free. SignatureCV is not directed to children under 16; please contact us if you believe a child supplied personal data unlawfully.
9. Cookies and recovery codes
SignatureCV uses a strictly necessary, secure signed browser cookie to connect checkout with payment status and paid access, and local browser storage to save your workspace. An optional single-use recovery code lets you restore the same paid access in another browser; anyone holding an unused code can use it, so it must be kept private. Creating a new code revokes earlier unused codes. These are required for requested functionality. We do not currently use advertising cookies.
Effective 8 September 2026 · Contact: [email protected]