Privacy Policy
Ornexi CV ("the Service", "we") provides an AI-powered resume building tool. This policy explains what data we collect, why, and how you can exercise your rights under Israel's Privacy Protection Law (1981) and Amendment 13.
What we collect
- Email address — for login (one-time links or password) and account communication.
- Password — if you choose to set one, it is stored only as an encrypted hash (bcrypt); we cannot see it.
- Resume content — name, work experience, education, skills, and anything else you choose to provide.
- Technical usage data — IP address, timestamps, and rate-limit counters, for security and abuse prevention.
- Billing details — at checkout, including invoice fields (name, address, tax ID) if you supply them.
Legal basis for processing
- Performance of a contract — processing is necessary to provide the resume-building service you requested.
- Consent — you give explicit consent when registering for the Service.
- Legitimate interest — system security and fraud prevention.
- Legal obligation — retention of payment records as required by law.
How we use your data
Resume content you submit is sent to a third-party language model provider (Anthropic, USA) solely to generate your resume. We do not sell your data and do not use it to train AI models.
International data transfers
To generate your resume, form content is transferred to Anthropic PBC servers (USA). Anthropic does not retain submitted data for model training and is subject to its own privacy policy and API terms. All transfers use TLS encryption. We have satisfied ourselves that an adequate level of protection is maintained for such transfers.
Email delivery
Emails from the Service (login links, pre-deletion warnings, and sending your CV to your email on request) are delivered via an external email provider — Brevo (EU). When you ask to send your CV by email, the PDF is transmitted through this provider to your account email address only, and we do not keep a copy of it on our servers.
Cookies
This site does not use tracking cookies. We use localStorage only to save accessibility preferences and session state. No third-party advertising or analytics scripts are embedded.
Retention & automatic deletion
- Unpaid CVs (drafts and CVs awaiting payment) — permanently deleted within 14 days of creation. A warning email is sent to the account address before deletion.
- Purchased CVs — kept for up to 180 days from the payment date, then permanently deleted.
- Inactive accounts — permanently deleted after 180 days without a login. A warning email is sent to the account address about 14 days before deletion; signing in again restarts the clock. Note: this is separate from purchased-CV retention — there the 180 days run from the payment date, here from the last login.
- Payment and invoice records — retained separately for as long as required by law (including tax law), even after the CV or account is deleted, with no link to them.
- Deletion is final and runs automatically once a day; deadlines are computed in UTC. PDF files are not stored on the server (they are regenerated on each download), so deleting the record removes all content.
- You can manually delete unpaid CVs at any time from your account page; the time remaining until deletion is shown next to each CV.
- Every deletion is recorded in an internal audit log (without CV content) for compliance, and the log entry itself is deleted after 12 months.
The legal basis for these periods is performance of our contract with you and the data-minimization principle under Amendment 13 to Israel's Privacy Protection Law. Your rights to immediate deletion and data export (JSON) are described below.
Your rights
- Access & export — download a full copy of your data from your account page.
- Deletion — delete your account and all associated data irreversibly from your account page. For your protection, deletion completes after you confirm via a link sent to the account email.
- Rectification — contact us to correct inaccurate data.
- Objection — you may object to certain types of processing.
- Data minimization — we only collect what is necessary.
Right to complain
If you are not satisfied with how we handle your data, you may contact the Israeli Privacy Protection Authority:
Website: gov.il — Privacy Protection Authority
Phone: +972-2-5196888 | Email: ppa@justice.gov.il
Contact
For any privacy-related questions: privacy@ornexi.xyz
Created by Ornexi