Home Free CV Builder ✉️ Cover Letter Templates About Contact
🔒 GDPR ✅ Compliant

Privacy Policy

Last updated: 29 June 2026 · ForgCV
DPO Contact: vixfor.contact@gmail.com

Table of Contents

  1. Who are we?
  2. Data collected
  3. Purposes and legal bases
  4. Retention period
  5. Data sharing
  6. Your GDPR rights
  7. Cookies and trackers
  8. Security
  9. Contact

1. Who are we?

ForgCV is an online CV creation service published by ForgCV registered in France. ForgCV is accessible at forgcv.com.

As data controller SAS takes the protection of your personal data very seriously and is committed to complying with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

2. Data Collected

ForgCV collects two types of data:

  • CV content data: name, first name, email address, phone number, professional experience, education, skills, and any other content you enter in the CV generator. This data remains in your browser (local storage) and is never sent to our servers on the free plan.
  • Browsing data: anonymised IP address, pages visited, session duration, browser type, browser language — collected via Google Analytics 4 (anonymised data).
  • Account data (free plan only): email address, first name, payment data processed exclusively by Stripe (we never store card numbers).

3. Purposes and Legal Bases

  • Service provision (basis: contract performance) — Enabling the creation, editing, and export of your CV.
  • Product improvement (basis: legitimate interest) — Analysis of browsing behaviour in aggregated and anonymous form.
  • Communication (basis: consent) — If you subscribe to our newsletter, we will send you product emails. You can unsubscribe at any time.
  • Legal obligations (basis: legal obligation) — Retention of certain data for accounting or legal purposes.

4. Retention Period

  • CV content data (free plan): stored locally in your browser until cache is cleared — never on our servers.
  • Account data (free plan): retained for the duration of the contract + 3 years after termination.
  • Browsing data (GA4): maximum 14 months (default GA4 setting).
  • Accounting data: 10 years in accordance with Article L.123-22 of the French Commercial Code.

5. Data Sharing

We never sell your personal data. We may share it with:

  • Google LLC (Analytics 4) — Audience analysis, with anonymised IP. Registered address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
  • Stripe Inc. — Secure payment processing (free plan only). PCI-DSS Level 1 certified.
  • Legal authorities — If required by law or a court order.

Any transfer outside the EU is governed by standard contractual clauses (SCCs) approved by the European Commission.

6. Your GDPR Rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain a copy of your data.
  • Right to rectification: correct inaccurate data.
  • Right to erasure ("right to be forgotten"): delete your data.
  • Right to portability: receive your data in a structured format.
  • Right to object: object to processing based on legitimate interest.
  • Right to restriction: restrict the processing of your data.

To exercise your rights, contact us at vixfor.contact@gmail.com. Response within 30 days. You may also lodge a complaint with the CNIL.

7. Cookies and Trackers

ForgCV uses a minimal number of cookies. See our cookie policy for full details.

  • Functional cookies (essential, no consent required): local saving of the CV currently being written.
  • Analytics cookies (with consent): Google Analytics 4 with IP anonymisation.

8. Security

We implement appropriate technical and organisational measures: HTTPS/TLS encryption on all communications, security headers (CSP, HSTS, X-Frame-Options), restricted access to personal data limited to employees who need it.

9. Contact

For any questions relating to this policy or your personal data:

10. Hosting

The site forgcv.com is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Netlify is certified compliant with the EU-U.S. Data Privacy Framework. Static files are distributed via Netlify's global CDN.

No data entered by the user (CV, cover letter) is transmitted to our servers — processing is carried out entirely in the browser and stored locally via localStorage. For more information on Netlify's privacy practices: netlify.com/privacy.