Your CV stays with you

Who is responsible

Opagine is run by Victor Coltisor, Romania, who is the controller of your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data, write to opagine@coltisor.com.

Using Opagine without an account

You can write, design and download CVs without signing in. Everything you write, including your photo, is stored in your browser’s storage on your device, not on our server. Downloading a PDF happens in your browser too. Deleting a CV, or clearing this site’s data in your browser, removes it for good, so export a backup if you want to keep a copy. If you sign in later, your CVs move to your account (see below).

Signing in with Google

Signing in is optional. It lets you use the AI assistant and keep your CVs in your account. When you sign in, Google tells us your name, email address, profile picture and Google account ID, and gives us sign-in tokens. We store these, your CVs, saved designs, and for each sign-in session your IP address and browser (to keep your account secure). While you are signed in, your profile picture is shown from Google’s servers.

When you sign in, the CVs and saved designs in your browser are copied to your account and then removed from the browser, so you find them in one place on any device. To keep a CV out of your account, export it and delete it before you sign in.

Legal basis: providing the service you asked for (Art. 6(1)(b) GDPR).

The AI assistant

The assistant is available when you’re signed in. When you send it a message, your message, the conversation so far and the content of the CV you’re editing (without photos) are sent to OpenAI to produce an answer. We don’t store the conversation; it is gone when you leave the CV. We count how many messages each account sends per day, to keep a fair daily limit. OpenAI does not use this data to train its models and may keep it for up to 30 days to detect abuse.

Importing a CV also needs you to be signed in. The file is read in your browser and never uploaded: only its text (or the text you paste) is sent to OpenAI, which returns it as CV sections. We don’t store the text; what you keep is the CV you create from it. An import counts towards your daily messages.

A CV can contain sensitive details, such as your date of birth, nationality or health. If you don’t want these sent to the AI service, remove them before you use the assistant.

Legal basis: providing the service you asked for (Art. 6(1)(b) GDPR).

Connected AI apps

You can connect an AI app you use, such as Claude or ChatGPT, to your account (on “Connect AI apps”). Once you allow it, the app can read the CVs in your account and create and change them when you ask it to. What the app reads is then handled by the app’s provider, under their terms and privacy policy, not ours. We store which apps you allowed, the name and web address each app gives for itself, and the access keys we issue to it. You can disconnect an app at any time; it then loses access straight away.

Legal basis: providing the service you asked for (Art. 6(1)(b) GDPR).

Fonts

The fonts of your CV come from Google Fonts, but your browser loads them from our server: our server fetches them from Google, so Google doesn’t see your IP address. The fonts of the website itself are part of the site.

Hosting and server logs

Opagine is hosted by Cloudflare. To deliver the site and protect it from abuse, Cloudflare processes technical data of each request, such as your IP address, browser and the page requested. Our server logs are kept for at most 7 days. We also limit how many requests can be made in a short time, without storing anything for it.

Legal basis: our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).

Stored on your device

We only store what the site needs to work, so no consent banner is needed. There are no tracking or advertising cookies.

Who receives your data

These services process data on our behalf, under data processing agreements, and only for the purposes above:

• Cloudflare, Inc.: Hosting, database for accounts, security and server logs. Account data is stored in the EU; requests are served from the nearest Cloudflare location.
• Google LLC / Google Ireland Ltd.: Sign-in with Google (only if you sign in). Google Fonts for CV fonts, fetched by our server. EU and USA.
• OpenAI, L.L.C. / OpenAI Ireland Ltd.: The AI assistant and CV import (only when you send a message or import a CV). USA.

Where data goes to the USA, it is protected by the EU–US Data Privacy Framework or the EU’s Standard Contractual Clauses. We don’t give your data to anyone else, unless the law requires us to.

How long we keep it

• Your account, CVs, saved designs and daily message counts: until you delete your account.
• Sign-in sessions: 7 days after you last used them, or until you sign out.
• Connected AI apps: until you disconnect them or delete your account. Their access keys expire after an hour and can be renewed for up to 30 days.
• AI conversations: not stored by us (OpenAI: up to 30 days, see above).
• Server logs: at most 7 days.

Deleting your account (in the account menu on “My resumes”) removes your account and everything in it straight away.

Your rights

You have the right to access your data, to correct it, to have it deleted, to restrict or object to its use, and to get it in a portable format (you can export each CV as a file yourself). Write to us to use these rights. You can also complain to a data protection authority, such as the Romanian ANSPDCP (dataprotection.ro) or the one where you live.

Opagine is not meant for children under 16.

Changes

If what we do with your data changes, we update this page and the date at the top. Bigger changes will be shown in the app.