Terms and Conditions

Effective date: 26 May 2026  ·  Last updated: 12 June 2026

Welcome to CVera ("we", "us", "our"). By accessing or using CVera at cvera.eu (the "Service"), you agree to be bound by these Terms and Conditions ("Terms"). Please read them carefully. If you do not agree, you may not use the Service. CVera is developed by Ralex Lab (ralexlab.com). These Terms are supplemented by Ralex Lab's general terms at ralexlab.com/terms; where the two conflict, these CVera Terms prevail for your use of the Service.

1. Description of Service

CVera is an online curriculum vitae (CV) builder that lets registered users create, customise, preview, share and export professional CVs. Access to features depends on the subscription plan you choose (see section 6). Premium templates, public share links, CV translation, and the AI assistant are available on paid plans.

2. Eligibility

You must be at least 16 years of age to use CVera. By registering, you confirm that you meet this requirement and that the information you provide is accurate and complete.

3. Account Registration and Security

You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account. You agree to notify us immediately of any unauthorised use of your account. We reserve the right to suspend or terminate accounts that violate these Terms or that we reasonably suspect are being misused.

4. User-Generated Content

You retain full ownership of all content you enter into CVera (personal details, work experience, education, etc.). By submitting content, you grant us a limited, non-exclusive licence to store and process that content solely for the purpose of providing the Service. You are solely responsible for the accuracy and legality of the content you submit.

5. Intellectual Property

All software, designs, templates, logos and other materials forming part of CVera are the exclusive property of CVera or its licensors and are protected by applicable intellectual property laws. You may not copy, reproduce, distribute or create derivative works from them without our prior written consent.

6. Subscriptions, Payments and Refund Policy

• Plans. CVera offers a free plan and three paid plans (Pro, Pro+, Max), each unlocking a different set of features (premium templates, public share links, CV translation, AI assistant). Plan details and current prices are shown on the Pricing page.
• Billing. Paid plans renew automatically on a monthly or annual cycle, depending on the option you choose at checkout. Prices are displayed in EUR. All transactions are processed securely by Stripe. CVera does not store your payment card details.
• No trials. CVera does not currently offer subscription trials. As an alternative to a trial, we offer the CV Pass, a one-time purchase that can be used to save one premium CV and one premium cover letter without starting a subscription. The CV Pass does not include subscription-only features such as CV translation or the AI assistant.
• Cancellation. You may cancel at any time from Settings → Billing → Manage in Stripe. Cancellation takes effect at the end of the current billing period; you keep access to paid features until that date. No refund is issued for the unused portion of a period unless required by mandatory consumer protection law.
• Refund policy. Subscription payments are generally non-refundable once the billing period has started, except where required by mandatory consumer protection law (including EU Directive 2011/83/EU for EEA residents). If you believe a charge was made in error, please contact us within 14 days of the transaction.
• Plan changes. Upgrading to a higher plan (or to a longer billing interval) takes effect immediately, and the price difference is charged at the time of the change. Downgrading to a lower plan takes effect at the end of the current billing period: you keep your current features until then, and the new price applies from the next renewal.
• Daily save limits. The number of CVs you can save (export or snapshot) per day depends on your plan and resets every day at 00:00 UTC. We may change these limits at any time without prior notice to protect the stability, cost and fair use of the Service.

7. Data Protection and Privacy (GDPR)

CVera is committed to protecting your personal data. For users in the European Economic Area (EEA), we process your data in accordance with the General Data Protection Regulation (GDPR) (EU 2016/679). All users, regardless of location, benefit from the same privacy standards described in this section.

• Data Controller: CVera. For any privacy-related requests, please use our Contact page.
• Encryption at rest: CV content (personal details, work history, saved-CV snapshots, photos) is encrypted in our database using AES-256-GCM. Each user has a Data Encryption Key (DEK); by default the DEK is wrapped by an application master key held in environment variables. Passwords are never stored in plain text (ASP.NET Core Identity password hashing).
• Vault Mode (optional, zero-knowledge): You may enable Vault Mode in Settings → Vault Mode. When enabled, your DEK is re-wrapped using a passphrase only you know (Argon2id key derivation) and the master-key wrap is deleted. From that moment, even CVera staff cannot decrypt your CV data without your passphrase. A one-time recovery code is shown when enabling Vault Mode. This is the only way to regain access if you forget your passphrase. If you lose both, your CV data is permanently unrecoverable; CVera has no ability to reset it. Public share links use a separate, share-specific key so they keep working independently of Vault Mode.
• Encryption in transit: All communication between your browser and our servers is encrypted via TLS (HTTPS).
• Data we collect: name, email address, CV content you enter, profile photo (optional), subscription status, payment transaction records, AI-feature usage counters (timestamps + token totals, not content), and technical logs (IP address, timestamps, browser information).
• Legal basis: Contract performance (Art. 6(1)(b) GDPR) for operating your account and providing the Service; Legitimate interests (Art. 6(1)(f)) for security and fraud prevention.
• Data retention: Your data is retained for as long as your account is active. You may request deletion at any time. Application and audit logs are retained according to the period configured in the Service (default 30 / 90 days).
• Your rights: You have the right to access, rectify, erase, restrict processing of, and port your personal data. EEA users may also lodge a complaint with their national data protection authority (see edpb.europa.eu for a list of EU authorities). You may exercise these rights from your Account Settings page or by contacting us.
• Third-party processors: Stripe (payment processing & subscription billing), Google Cloud Translation (CV translation, up to the free-tier quota), OpenAI (CV translation overflow and the AI assistant on the Max plan), LinkedIn (optional OAuth login & optional profile import), Google & Apple (optional OAuth login), and ProxyCurl (optional LinkedIn profile import). Each acts as a data processor and processes data only as instructed by us.
• CV translation limits: CV translation is subject to a per-user daily limit. We may change this daily limit at any time without prior notice to protect the stability, cost and fair use of the Service.
• No data selling: We will never sell or rent your personal data to third parties.

8. AI Assistant (Max plan)

The AI assistant offers four optional features: improving a bullet point, generating a Professional Summary from your work history, suggesting additional skills, and rewriting a passage in a chosen tone. CV translation may also use AI when Google's free-tier quota is exhausted.

• What is sent: when you click an AI button, the relevant fragment of your CV (e.g. one bullet, the list of recent roles, or one block of text) is sent to OpenAI for processing. The request and response are routed through CVera's server but content is not persisted by CVera beyond what is needed to display the suggestion.
• Usage logging: we record the timestamp, feature name and token count of each AI call for cost monitoring and to enforce rate limits. We do not store the input or output text.
• Rate limits: per-user hourly and daily caps apply. We may change these limits at any time without prior notice to protect the stability, cost and fair use of the Service. When a cap is reached, you must wait for the relevant window to elapse.
• Accuracy: AI output is a suggestion only. You are responsible for reviewing it before saving or sharing. CVera makes no warranty as to the accuracy or suitability of AI-generated text.
• OpenAI: CVera uses OpenAI as a data processor. Under our agreement with OpenAI, prompts and completions are not used to train OpenAI models. See OpenAI's business terms for details.

9. Cookies

CVera uses essential cookies required for authentication and security (including, for users with Vault Mode enabled, a session cookie containing the unlocked DEK protected by ASP.NET Data Protection). Optional analytics cookies help us improve the Service and are off by default. You can manage your cookie preferences via the Cookie Settings link in the footer at any time.

10. Prohibited Uses

You agree not to use CVera to:

• Submit false, misleading, or defamatory content;
• Attempt to gain unauthorised access to any part of the Service or another user's account;
• Reverse-engineer, scrape, or extract data from the Service;
• Use the AI assistant or translation features to generate spam, harassment, or content that violates third-party rights or applicable law;
• Use the Service to distribute malware, spam, or harmful content;
• Circumvent any security or access-control measures.

11. Third-Party Services

The Service integrates with third-party providers (Stripe, OpenAI, Google Cloud Translation, LinkedIn, Google, Apple, ProxyCurl). Your use of these integrations is also subject to the respective third-party terms of service. CVera is not responsible for the acts or omissions of third-party providers.

12. Disclaimer of Warranties

The Service is provided on an "as is" and "as available" basis. To the fullest extent permitted by applicable law, CVera disclaims all warranties, express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or free of viruses or other harmful components. AI-generated suggestions and machine translations may contain inaccuracies; you are responsible for reviewing them before relying on them.

13. Limitation of Liability

To the maximum extent permitted by applicable law, CVera and its operators shall not be liable for any indirect, incidental, special, consequential or punitive damages, or any loss of profits or data, arising out of or in connection with your use of the Service. Our total aggregate liability to you shall not exceed the amount you paid to CVera in the twelve (12) months preceding the claim. Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under applicable law.

Vault Mode disclosure. If you enable Vault Mode and lose both your passphrase and recovery code, CVera cannot recover your data. You accept this risk by enabling Vault Mode.

14. Indemnification

You agree to indemnify and hold harmless CVera and its operators from any claims, damages, losses, and expenses (including reasonable legal fees) arising out of your use of the Service, your violation of these Terms, or your infringement of any third-party rights.

15. Termination

You may delete your account at any time from Account Settings. Upon deletion, all your personal data, CV content and subscription history will be permanently removed; any active subscription is canceled at period end via Stripe. We may terminate or suspend your access at any time if you breach these Terms, with or without notice.

16. Changes to These Terms

We may update these Terms from time to time. Material changes will be communicated by email or by a prominent notice in the Service at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised Terms.

17. Governing Law and Disputes

These Terms are governed by applicable European Union law. Users in the EEA retain all mandatory consumer protection rights provided by the laws of their country of residence. Nothing in these Terms is intended to limit any rights you have under mandatory applicable consumer protection legislation.

18. Contact

If you have any questions about these Terms, please reach out via our Contact page.