Privacy Policy

01Introduction

This Privacy Policy explains how CVfolder ("CVfolder", "we", "us" or "our") collects, uses, shares and protects personal information when you use the website cvfolder.com and its related services (the "Service"). CVfolder is an online portfolio and CV service for educators and students, operated from Tampa, Florida, United States.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

02Information we collect

Information you give us.

Account information: your first and last name, email address and password. Passwords are stored only in hashed (encrypted, one-way) form.
Portfolio content: the information and materials you add to your portfolios, such as biographical details, a profile photo, education, employment, publications, courses, grants, awards, documents, files, links and videos.
Communications: the name, email address and message you send through our contact form.

Information collected automatically.

Account activity: the date and time of sign-up, log-in and similar account events, and the IP address of your most recent log-in.
Usage counts: the number of times a portfolio or blog post is viewed. These counts are not linked to individual visitors.
Server logs: technical information sent by your browser, such as IP address, browser type, the pages requested and the date and time of the request.

03How we use your information

We use personal information to:

provide, operate and maintain the Service, including displaying portfolios and creating PDF exports;
create and secure your account, including confirming your email address;
send service messages, such as email confirmation and password reset emails;
send a weekly email with new articles from the CVfolder blog to account holders (you can unsubscribe at any time with the link in every email or on the blog page);
respond to your questions and requests;
detect and prevent spam, fraud, abuse and security incidents;
understand overall use of the Service and improve it; and
comply with legal obligations.

We do not sell or rent personal information, we do not use it for advertising, and we do not use your content to train artificial intelligence models.

04Portfolio visibility

You control who can see each portfolio. A portfolio can be private (visible only to you when logged in), shared through access codes that you create and can revoke, or public (visible to anyone with the link, and possibly indexed by search engines). You can change this setting at any time. Information you make public may be viewed, copied or saved by others, and we cannot control what they do with it.

We share personal information only in the following cases:

With your permission, for example when you make a portfolio public, give someone an access code, or share an item by email.
With service providers who help us run the Service, under obligations to protect the information and use it only for that purpose. These are our web hosting provider (servers, database and email) and Google reCAPTCHA, which protects our contact form from spam and is subject to Google's Privacy Policy and Terms of Service.
Embedded content: if a portfolio includes content embedded from another site, such as a YouTube video, that site may collect information under its own privacy policy when the content is viewed.
For legal reasons, when we believe in good faith that disclosure is required by law, or is needed to protect the rights, property or safety of our users, the public or CVfolder.
In a transfer of the Service, such as a merger or change of operator, in which case this policy will continue to apply to your information.

06Cookies

We use one essential session cookie to keep you logged in. It lasts for 7 days after your last visit (so you do not have to log in every time) and is deleted when you log out. We do not use analytics, advertising or social-media tracking cookies. The Service's fonts and scripts are hosted on our own servers, so loading our pages does not send your information to outside font or script providers.

07Data retention

We keep your account information and portfolio content for as long as your account exists. When you delete content or your account is deleted, it is removed from the live Service; copies may remain in our backups for up to 60 days before they are overwritten. Contact-form messages are kept for as long as needed to respond and to keep a record of the conversation. Server logs are rotated and deleted on a regular schedule.

08Security

We use reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS), hashed passwords and restricted administrative access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please choose a strong password that you do not use elsewhere.

09Your rights and choices

You can view and update most of your information directly in your account and portfolio settings, export your portfolio to PDF, and download the files you uploaded. You may also ask us to:

give you a copy of the personal information we hold about you;
correct information that is inaccurate;
delete your account and personal information; or
stop sending you the weekly blog email (you can also do this yourself with the unsubscribe link in every email).

To make a request, contact us using the details below from the email address registered to your account. Depending on where you live, you may have additional rights under applicable law, and we will respond to requests as that law requires.

10Children and student information

Accounts may be created only with an institutional .edu email address. The Service is not directed to children under 13, and children under 13 may not create accounts themselves. Portfolios for K-12 students are set up and managed by their teachers or schools. When a school uses the Service for students, the school is responsible for obtaining any consent required by law or school policy, including under the Children's Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA). We use student information only to provide the Service to the school and for no other purpose. If you believe a child has provided personal information without appropriate consent, please contact us and we will delete it.

11International users

The Service is operated in the United States, and your information is stored and processed there. If you use the Service from outside the United States, you understand that your information will be transferred to, and processed in, a country whose data protection laws may differ from those where you live.

12Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. If the changes are significant, we will give notice on the Service or by email before they take effect.

13Contact us

If you have questions about this Privacy Policy or want to make a request about your information, please contact us through our contact page.