Privacy Policy

1. Data Controller

Tingsteq Solutions, Kalmar, Sweden ("we", "us", "our") is the data controller for the personal data processed through liioncv.com. Contact: info@tingsteqsolutions.com

2. Information We Collect

Account information: When you sign up, we collect your name and email address through Clerk, our authentication provider. This processing is necessary to perform the contract with you (GDPR Art. 6.1.b).

Payment information: Payments are processed by Stripe. We do not store your card details — Stripe handles all payment data securely. This processing is necessary to perform the contract (GDPR Art. 6.1.b).

CV data: Your CV content (personal info, work experience, education, skills) is stored locally in your browser's localStorage. It is not stored on our servers.

Usage data: We use Vercel Analytics to collect anonymized, aggregated data about how users interact with the Service (page views, feature usage). No personally identifiable information is collected. This is based on our legitimate interest in improving the Service (GDPR Art. 6.1.f).

3. Legal Basis for Processing

4. How We Use Your Information

• To provide and maintain the Service
• To manage your account and credit balance
• To process payments
• To send important service-related communications
• To improve the Service based on anonymized usage data

5. AI Processing

When you use AI features (text extraction, improvement, job tailoring, chat), your CV content is sent to Anthropic's Claude API for processing. Anthropic's privacy policy applies to this processing. We do not store AI conversation data.

6. Third-Party Services & International Transfers

We use the following third-party services. Several of these are based in the United States. We ensure appropriate safeguards are in place for data transfers outside the EU/EEA, primarily through Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

Account information is retained as long as your account is active. CV data is stored only in your browser and is deleted when you clear your browser data. You can delete your account at any time through the account settings, after which your account data will be deleted within 30 days.

8. Cookies

We use the following cookies:

• Authentication cookies (Clerk): Strictly necessary for login and session management. No consent required.
• Analytics (Vercel Analytics): Anonymized, aggregated usage statistics. No personally identifiable information is collected or linked to cookies.

We do not use advertising or tracking cookies.

9. Your Rights under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access (Art. 15): You can request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You can request correction of inaccurate personal data.
• Right to erasure (Art. 17): You can request deletion of your account and associated personal data.
• Right to restriction (Art. 18): You can request that we restrict the processing of your data in certain circumstances.
• Right to data portability (Art. 20): You can request your personal data in a structured, machine-readable format.
• Right to object (Art. 21): You can object to processing based on legitimate interests.
• Right to opt out of communications: You can unsubscribe from non-essential emails at any time.

To exercise any of these rights, please contact us. We will respond within 30 days.

You also have the right to lodge a complaint with the Swedish supervisory authority: Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, imy@imy.se.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or a notice on the Service at least 30 days before the changes take effect.

11. Contact

Questions about this Privacy Policy? Get in touch or email info@tingsteqsolutions.com.