Privacy Policy

Ember CV Builder ("Ember", "we", "us") is a service operated by SparksWise, Belgium. We respect your privacy and process your personal data in line with the EU General Data Protection Regulation (GDPR) and Belgian data protection law.

1. Data Controller

SparksWise — Belgium
Contact: liviu.popa@sparkswise.com

2. What data we collect

• Reflection content you type into Ember (your life chapters, skills, stories) — used to generate your CV and stored against your anonymous session, then linked to your account when you sign in.
• CV uploads and outputs — text we parse from a CV you upload, the structured CV data we generate, and the .docx files we produce for download.
• Contact details you provide at the end of the flow (name, location, email, phone) so they can appear on your CV and so we can email the magic link and the finished file.
• Account data when you sign in by magic link: your email address and authentication tokens.
• Payment data when you buy credits or a subscription — handled by Stripe under their own privacy policy. We store the resulting purchase record (plan, status, credits) but never your card details.
• Technical data: a browser fingerprint and an anonymous session id stored in your browser, used to track your free CV allowance and to reconnect you to your draft.

3. Why we process your data (legal basis)

• Contract (Art. 6(1)(b) GDPR) — to deliver the CV you asked us to generate and to fulfil any tailoring credits or subscription you purchase.
• Consent (Art. 6(1)(a)) — for any optional marketing email or analytics.
• Legitimate interest (Art. 6(1)(f)) — to prevent abuse of the free tier (via fingerprint and email tracking) and to improve the service.
• Legal obligation (Art. 6(1)(c)) — to keep invoicing records as required by Belgian law.

4. AI processing

Your reflection text and CV content are sent to large language models via the Lovable AI gateway to generate and tailor your CV. These prompts are processed for the sole purpose of producing your output and are not used to train third-party models.

5. How long we keep it

Reflection sessions, generated CVs, and uploaded CV text are kept for as long as your account exists, or for up to 24 months for anonymous sessions. CV files in storage are delivered via signed links valid for 30 days. Purchase records are kept for 7 years to meet Belgian invoicing requirements. You can request earlier deletion at any time.

6. Who we share data with

We do not sell personal data. Limited processors support us under data-processing agreements: our hosting and database provider (Lovable Cloud / Supabase), our AI gateway (Lovable AI), our payment provider (Stripe), and our email provider. Data may be processed within the EEA or under appropriate transfer safeguards.

7. Your rights

• Access, rectification, erasure of your data
• Restriction or objection to processing
• Data portability (your CV data can be exported as .docx)
• Withdraw consent at any time
• Lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be)

To exercise any right, email liviu.popa@sparkswise.com.

8. Cookies and local storage

See our Cookie Policy for details on the small set of first-party cookies and local-storage items Ember uses.

9. Updates

We may update this policy. Material changes will be highlighted on this page and dated above.