Privacy policy

In short: the file you upload is read and deleted at once; the CV you edit stays in your browser; for the automatic reading its content goes through Claude, the AI service by Anthropic, which does not use it to train its models.

Data controller

Antonio Morlino, Via Arrigo Benedetti, 13 - 00159 Roma (RM), Italia, VAT IT04060650712. For any request about your data: dev@antoniomorlino.com.

What data we process

• The CV file you upload and its content: usually name, contacts, date and place of birth, education and work history, skills; sometimes a photo.
• The data you type in the editor, and the photo and signature you add.
• Technical data: the IP address and the information every browser sends to a website (server access log).

We recommend not putting in your CV data an employer does not need, in particular data about health, religious or political beliefs, trade union membership and the like.

Why we use it, and on what basis

• To provide the service you ask for: reading the CV, splitting it into sections, laying it out and creating the PDF. Legal basis: performance of the requested service (Art. 6(1)(b) GDPR).
• To protect the service from abuse (request limit per IP address). Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for advertising or profiling and we do not sell it to anyone.

How we process it and for how long

• The uploaded file stays on the server only while it is read (usually less than a minute) and is deleted at the end of the request, even when the reading fails.
• The CV you edit is saved in your browser (the device's local storage). You delete it with "New CV" or by clearing the site data in your browser.
• To create the PDF the browser sends the CV data, photo and signature to the server: the server builds the PDF, sends it back and deletes everything at once. We keep no copy.
• Request limit: we keep for at most one hour a one-way hash of the IP address, never the address itself.
• Cost statistics: for each reading we record only the date, the file format and the amount of text processed, with no personal data.
• Access log: the hosting provider keeps the server's technical logs for the time set by its service, for security.

Who receives it

• Anthropic, PBC (United States), provider of the Claude AI model, which receives the content of the uploaded CV to extract its sections. It acts as data processor: under its commercial terms it does not use this data to train its models and keeps it only for a limited time for security and abuse prevention. The transfer to the United States relies on the safeguards provided by the GDPR (standard contractual clauses). Policy: anthropic.com/legal/privacy.
• The hosting provider of the site, which hosts the server and its technical logs.

You send the PDF you download to whoever you like: from then on it is under your control.

Cookies and browser storage

Civetta uses only technical tools needed for it to work, which require no consent:

• the civetta_lang cookie, which remembers the chosen language (one year);
• the browser's local storage, which holds the CV you are editing;

We use no analytics, profiling or advertising cookies.

Your rights

You can ask for access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest, by writing to dev@antoniomorlino.com. Without an account the CVs stay only on your device; with an account you can delete them yourself, together with the account, at any time. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the authority of your country.

Minimum age

The service is meant for people aged 14 or over.

Changes

If we change how we process data, we update this page and the date below.

Last updated: 03/11/2026