Privacy Policy
Your resume, CV and letter text stays in your browser when you use the editor. Visiting the site, using a license or contacting support still involves some personal data. Here is what happens and what you can control.
Effective date:
Documents stay on your device
The current editor works in your browser without an account. Resume, CV and letter text is processed locally, not uploaded to our servers for editing or export. Browser storage can retain drafts and preferences on that device. This is not a cloud backup.
We cannot see or delete drafts held only in your browser. To remove them, use your browser's site-specific storage controls. Export backups first: clearing site data, changing browsers or losing access to the device can remove saved documents. If you choose to send a document to support, that copy becomes part of your support message.
Website traffic and license checks
Our hosting and network providers process connection and request information to deliver and protect the site. This can include your IP address, requested URL, request time, and browser or device information. A country signal from the network is used to decide whether analytics consent is required. This traffic is separate from your document text.
Premium license validation uses limited license and validation records, including validation times and hashed network or device values, to check access and limit abuse. Hashing is not a promise of anonymity. These records do not contain your resume or letter text.
Information you send to support
If you contact us by email or WhatsApp, we receive the contact details and messages you choose to send. For an order, license question or refund, this may include a payment reference, payment date and the email address or WhatsApp contact used. Email, messaging and any payment provider involved also process information under their own terms and privacy policies.
Send only what is needed. We do not need a complete card number or a copy of your resume to identify a refund request. Do not send passwords, security codes or unrelated sensitive information.
Analytics and your browser choice
When Google Analytics 4 (GA4) is enabled, it measures page visits and product interactions such as tool use and exports. Our analytics events are designed not to include resume or letter field values. Google may process device, browser, page and network information; this is not a claim that analytics is anonymous.
In the European Economic Area (EEA), United Kingdom (UK) and Switzerland, and when your region cannot be determined, the site uses basic consent mode: the Google analytics script does not load before you allow analytics. Elsewhere analytics may run unless you refuse. Advertising storage, advertising user data and advertising personalization are set to denied.
The banner offers “Allow analytics” and “No thanks”, and stores your choice in this browser. To change a saved choice, remove the site's analytics consent entry in your browser's site-specific storage and reload so the banner asks again. There is no separate settings page. Export document backups before clearing all site data, because that can also delete local drafts. A change applies to future processing; it does not undo earlier lawful processing. You can also contact us about withdrawing consent or objecting where applicable.
Why we process information
We use contact and order information to answer requests, provide purchased access and handle refunds, as needed for a contract or steps you request before a contract. We rely on consent for analytics where consent is required. Site security, abuse prevention and license protection rely on legitimate interests only where permitted and balanced against your rights. Some records must be kept to meet legal obligations, such as accounting or responding to lawful requests.
Providers and international processing
Service providers involved in hosting, network delivery, email, WhatsApp and enabled analytics process the information needed for those services. We may also disclose information when legally required. We do not send your locally held document text to those providers as part of the editor.
Creativism is in Indonesia, and providers may process information in other countries. Not every destination has the same protection as your country, and we do not claim blanket adequacy. Where applicable law requires safeguards for an international transfer, the transfer must use a lawful basis and required safeguards. Contact us for information about the providers and safeguards relevant to your request.
Retention and security
We keep support, order, license and security records only as long as necessary for their purpose and applicable legal obligations, including resolving disputes. There is no single retention period for all records. Local drafts remain under your browser's storage rules and your control, not our server retention policy.
We use reasonable technical and organizational protections, but no website, browser storage or messaging service is risk-free. Keep your device secure and keep your own exported backups.
Your privacy rights
Depending on the law that applies, including the GDPR and Indonesia's Law No. 27 of 2022 on Personal Data Protection, you may request access, correction or deletion, withdraw consent, and request portability or restriction of processing or object to processing where applicable. Rights can have legal limits, including records we must retain. Withdrawing consent does not affect processing that was lawful before withdrawal.
Contact us using the details below and describe the data or request. We may ask for reasonable information to verify your identity without collecting unnecessary data. We respond within the time required by the applicable law. You may complain to a competent data protection or supervisory authority, including the authority in your country where applicable. We cannot remotely erase local drafts: use your browser controls for those.
Policy updates
We will publish updates on this page with a new effective date. A policy update is not itself analytics consent or permission for a new use that requires your consent.
Operator and contact
Letter and CV is operated by Creativism in Yogyakarta, Indonesia. Creativism is responsible for the personal data processing described in the Privacy Policy.
Address: Jl. Perumahan Kenari Asri No.C7b, Losari, Sukoharjo, Kec. Ngaglik, Kab. Sleman, Daerah Istimewa Yogyakarta 55581, Indonesia. Address source: Creativism contact page.
For privacy, service or refund questions, email hello@letterandcv.com or use the current support details on our contact page, including WhatsApp.