← Back to home

Privacy Policy

Last updated: March 2026

1. Who we are

Bluntly is a CV analysis service operated by Bluntly (Marc Torrelles), based in Barcelona, Spain. We are the data controller for all personal data processed through bluntlycv.com.

Contact: hi@bluntlycv.com

2. What data we collect

  • Account data: Your email address and name, collected when you sign up via Clerk (our authentication provider).
  • CV files: The CV document you upload for analysis. Stored temporarily in Cloudflare R2.
  • Analysis results: The feedback report generated from your CV, stored in our database (Cloudflare D1).
  • Usage analytics: Anonymised page views and feature usage events, collected via PostHog. No cross-site tracking.
  • Payment data: If you pay for an analysis, card details are processed by Stripe. We never store full card numbers.

3. How we use your data

  • To provide and improve the CV analysis service
  • To process payments and prevent fraud
  • To send product updates and tips — only if you opt in (you can unsubscribe at any time)
  • To improve our AI model quality using anonymised, aggregated analysis data (no personal identifiers)

4. Data storage

  • CV files: Stored in Cloudflare R2 (EU region). Deleted after your analysis is complete, or within 30 days maximum.
  • Analysis results: Stored in Cloudflare D1 (EU region) and retained until you delete your account.
  • Account data: Managed by Clerk. Retained until you delete your account.

5. Third-party services

We use the following trusted providers to run Bluntly:

  • Anthropic — AI analysis of your CV content. Your CV text is sent to Anthropic's API for processing and is not retained by them beyond the API call.
  • Clerk — User authentication and account management.
  • PostHog — Product analytics. Can be blocked by ad blockers with no impact on core functionality.
  • Cloudflare — Infrastructure: CDN, database (D1), file storage (R2), and compute. All data stored in EU regions.
  • Stripe — Payment processing.

6. Cookies

  • Session cookies (Clerk): Required for authentication. Cannot be disabled without logging out.
  • Analytics cookies (PostHog): Used to understand how the product is used. Automatically blocked by most ad blockers — no action needed.

We do not use advertising, tracking, or third-party cookies.

7. Your rights (GDPR)

If you are based in the EU, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data (“right to be forgotten”)
  • Portability — receive your data in a machine-readable format
  • Object to certain processing (e.g., analytics)

To exercise any of these rights, email hi@bluntlycv.com — we respond within 30 days.

8. Data security

All data is transmitted over HTTPS. CV files are stored with server-side encryption. We limit access to personal data to what is necessary to operate the service.

9. Changes to this policy

We may update this policy from time to time. We'll notify registered users of significant changes by email. Continued use of Bluntly after changes constitutes acceptance.

10. Contact

For any privacy-related questions or requests: hi@bluntlycv.com