Privacy

In force since 4 October 2026 · Versão em português

In short: we do not store your CV. You write in your browser, the PDF is made in your browser, and when you close the tab what you wrote is gone. The only thing that leaves your device is the text of one field, when you press an AI button, and that is not stored either.

This is a translation of the Portuguese privacy policy. If the two ever differ, the Portuguese version applies.

01Who is responsible

CVManda is a service of FFtechnologies, the trading name of Fellipe Anderson França e Lima, a self-employed professional in Portugal.

Fellipe Anderson França e Lima (FFtechnologies)
Tax number (NIF) 334417899
Estrada do Areal, Lote 17, 2530-065 Lourinhã, Portugal
[email protected]

02Your CV

Everything you write stays in your browser's tab storage (known as sessionStorage). It is there so you do not lose your work if the page reloads. It is deleted when you close the tab, or when you press Delete all. On a shared computer (a library, a school, a job centre), press Delete all before you leave: some browsers let you reopen a closed tab, and what was in it.

The PDF is made on your device. It is not sent to any server, ours or anyone else's.

If you use Save draft to device, a file is created on your phone or computer. When you open it again, it is read right there, in your browser.

The cover letter follows the same rules: what you write stays in the tab storage, is deleted when you close it (or with Delete all), and the letter's PDF is made on your device. If you are making your CV in the same tab, you can bring what you wrote there into the letter: that happens in your browser, without going through any server.

The net salary calculator does the whole calculation in your browser: your salary, family situation and meal allowance are not sent anywhere or stored. If you press Share this calculation, the values go into the link you choose to send, in the part of the address after the "#", which browsers never send to any server.

The end-of-contract simulator works the same way: the contract dates, the salary and the reason the contract ends stay in your browser, are not sent or stored, and only go into a link if you share it.

03When you use the AI

The purple buttons ask a language model for a suggestion. When you press one, this is sent:

the text of that field: your profile, or the description of a job;
for skills, your profile and your job titles;
the field and the job you are applying for, and the language your CV is written in.

Never sent: your name, phone number, email, town, link, or the whole CV. The AI does not need them to improve a sentence.

The request goes through our server, which forwards it to a language model provider and sends you back the suggestion. We do not store the text or the reply: they do not go into any database, and the server's technical logs only say what kind of help was asked for, in which language, and how long it took.

Even so, do not write health data, other people's data, or anything you do not want to leave your device in those fields. The legal basis is your request: it only happens when you press the button.

In the cover letter

When you press Write the letter with AI, this is sent:

the job ad you pasted;
what you wrote under What you want to highlight;
the job title and company, if you gave them, the tone you chose (formal or friendly) and the language of the letter.

Never sent: your name, phone number, email or town, or the name of the person the letter is addressed to: they are added to the letter here, in your browser. Before the text leaves, your name is removed from what you wrote, and on the server, emails and phone numbers pasted in the ad or in your text are removed.

As with the CV suggestions, we do not store the ad, your text or the letter. The technical logs only say that a letter was requested, with which tone and language, and how long it took.

In the paid extras (translation and tailoring to a job)

For a translation (into European Portuguese, French, Spanish or German), we send the text that needs translating: job titles, profile, tasks, courses, skills, language names, driving licence, availability and dates. For tailoring to a job, we send the job ad you pasted, and the job title, profile, tasks, courses and skills from your CV.

Never sent: your name, phone number, email, town, link, the names of companies, schools and towns, or your photo. Emails and phone numbers written in the middle of the text or the ad are removed on the server before they go to the AI. Here too, we do not store the text or the reply.

04Payments

The CV, the cover letter, the net salary calculator and the end-of-contract simulator are free. The translation, tailoring to a job and the coffee are paid on Stripe, without creating a CVManda account.

Stripe receives the payment details and your email, to send you the receipt. Your card details never reach us.
We store the payment identifier, what you bought, the amount and how many times you have used it, with no name, no email and nothing from your CV, for 90 days: that is what makes your purchase work for the next 48 hours.
The invoice is issued to "Consumidor final" (final consumer) by our certified invoicing provider, and kept for the period Portuguese tax law requires.

The legal basis is the purchase you make and, for the invoice, the legal obligation to issue it.

05Protection against abuse

So that the AI is not used by automated programs, the first click on an AI button loads Cloudflare Turnstile, which checks that there is a person on the other side. Cloudflare receives your IP address and information about your browser. If you never use the AI, Turnstile is never loaded.

06Traffic measurement

We count visits without cookies and without a persistent identifier. For each visit we keep the page, the domain you came from, the type of device, how long the page was visible, how many times certain buttons were pressed (for example "download PDF") and some events, such as "PDF made", "AI suggestion used" or "the AI failed". Only the name of the button or event is kept (and, for the PDF, which of the three designs was chosen), never what you wrote.

Visitors are identified by a code that changes every day, calculated from the IP address and the browser. The IP address is not recorded. The legal basis is our legitimate interest in knowing whether the service is used.

07How long

What	How long
Your CV	Not stored by us. In your browser, until you close the tab.
Text sent to the AI and the reply	Not stored.
Traffic measurement	12 months, then deleted automatically.
Record of a purchase (payment identifier, product, amount, uses)	90 days, then deleted automatically.
Invoice for a purchase	The period Portuguese tax law requires.

08Who it is shared with

Who	What for
Cloudflare	Serving this page and, if you use the AI, checking that you are a person.
Language model provider	Generating the suggestions, only when you press an AI button.
Server hosting	Where the server that forwards requests to the AI runs.
Stripe	Receiving payments for the extras and the coffee, and sending you the receipt.
Certified invoicing provider	Issuing the invoice for each purchase, to "Consumidor final".

Some of these providers may process data outside the European Economic Area. When that happens, it is under the standard contractual clauses approved by the European Commission. We do not sell data and there are no ads.

09Your rights

As we do not store your CV, there is nothing of ours to access or delete: it is all with you. For any question about traffic measurement, a payment (tell us the email you used on Stripe) or this page, write to [email protected]. You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados.