Controller: Kagan Consulting (Kagan Serhan Ayik, sole proprietorship / eenmanszaak), Kerselaarlaan 12, 2220 Heist-op-den-Berg, Belgium – enterprise no. / VAT BE0748.634.023. Contact: serkvay13@gmail.com.
No account, minimum data. Your browser keeps a random code (token) in localStorage. On our server (Cloudflare KV) we keep for that token only: your number of kit credits, the programme label and expiry of active kits, and – only if you enter it at payment – a SHA-256 hash of your email to restore your purchase. Payment references are stored to make the purchase idempotent and restorable.
Your letter and background are not stored. When you create a kit, the text you entered is sent once over an encrypted connection to our server and to the AI provider (OpenAI, with store:false), used to generate your kit, returned to your browser, and then discarded. We do not write it to a database, file or log. The result is kept only in your browser (localStorage) until you delete it ("Delete my data") or clear your browser.
Do not send identifiers. Your name, email, phone and city for the CV are filled in locally in your browser and are never sent to us or to the AI. Please do not paste passport numbers, ID numbers or health data into the text fields.
Payments are processed by Mollie B.V. (Netherlands); we never see your card data. Hosting: Cloudflare. AI processing: OpenAI (may involve a transfer to the USA under the EU–US Data Privacy Framework / standard contractual clauses).
Abuse protection: the free quick check counts requests per hashed IP address for 48 hours.
Legal bases: contract (generating the kit you ordered), legitimate interest (security, abuse prevention), legal obligation (accounting records of payments, kept by Mollie and our bookkeeping).
Your rights: access, rectification, erasure, restriction, objection, portability. Use "Delete my data" in the app or email us. You may complain to the Belgian Data Protection Authority (www.dataprotectionauthority.be).
Age: this service is for adults (18+) only.