Translation for convenience. These documents were drafted under Turkish law (Law No. 6502 on Consumer Protection and the Turkish Data Protection Law, KVKK). In the event of any discrepancy or dispute, the Turkish version is the legally binding text.
Privacy Policy and Data Protection Notice
Last updated: 25 July 2026
This notice explains how personal data is processed through CookedCV (the “Platform”), in fulfilment of the disclosure obligation under Turkish data protection law (KVKK).
1. What data do we process?
- Your CV content: the text extracted from the PDF you upload (which may include your name, contact details, education and work history).
- The job posting: the text you paste in for the match analysis.
- Technical data: your IP address (held briefly in memory, solely to prevent abuse and to rate-limit requests), browser type and anonymous usage statistics.
2. Where is your data stored?
CookedCV has no database. The CV file you upload is never stored on the server. It is processed in memory for the duration of the request, its text is extracted, and it is gone once the request ends.
A photo you add to your CV is never sent to the server; it is processed in your own browser and your PDF is generated on your device.
3. Who do we share it with?
- OpenAI: your CV text and the job posting are sent to the OpenAI API so the analysis can be produced. OpenAI states that data submitted through the API is not used to train its models.
- Vercel: hosting infrastructure and anonymous traffic statistics.
- Cloudflare Turnstile: bot and abuse protection.
Beyond these, your data is not shared with third parties, sold, or used for marketing.
4. Purpose and legal basis
Your data is processed solely to provide the service you asked for (CV analysis and CV improvement), to keep that service secure and to prevent abuse. The legal basis is Articles 5/2-(c) and 5/2-(f) of the KVKK, together with your explicit consent.
5. Retention
CV content is not retained. Technical data such as your IP address is held in temporary memory for at most 1 hour for rate-limiting purposes and is then deleted automatically.
6. Your rights
Under Article 11 of the KVKK and under the GDPR you have the right to learn whether your data is processed, to request its correction or deletion, and to object to processing. Write to destek@cookedcv.xyz with any request.
7. Cookies
The Platform uses no marketing or tracking cookies. Only technical cookies necessary for the service to function and stay secure may be used.
8. Changes
This policy may be updated. The current version is always published on this page.