Privacy Policy

Last updated: 5/5/2025

1. Introduction

Canger & Shahab Crimpin GbR ("we", "us", or "our") operates CoverLetterGPT. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

2. Data Controller Information

The data controller for your personal data is:
Canger & Shahab Crimpin GbR
Zum Steinberg 12, 69121 Heidelberg, Germany
Email: info.crimpin@gmail.com

3. Data We Collect

We collect several different types of information for various purposes:

  • Account Data:

    • Email address
    • Name
    • Password (encrypted)
    • Profile information
    • Account settings
  • Usage Data:

    • Access times and dates
  • Content Data:

    • CV information you provide
    • Job descriptions you input
    • Generated (example)cover letters
  • Payment Data:

    • Payment history
    • Subscription status
    • Note: Payment processing is handled by Stripe

4. How We Use Your Data

  • To Provide Our Service:

    • Generate personalized cover letters
    • Manage your account
    • Process your payments
  • To Improve Our Service:

    • Analyze usage patterns
    • Debug technical issues
    • Enhance user experience
  • To Communicate With You:

    • Send service updates
    • Respond to your requests
    • Provide customer support

5. Legal Basis for Processing

  • Contract Performance: Processing necessary for the performance of our contract with you
  • Legal Obligations: Processing necessary for compliance with legal obligations
  • Legitimate Interests: Processing based on our legitimate interests in improving and promoting our services
  • Consent: Processing based on your specific consent where required

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including:

  • Account data: As long as your account is active
  • Generated content: For as long as necessary to provide our services or until you delete your account
  • Payment records: As required by tax laws (typically 10 years in Germany)

7. Your Data Protection Rights

Under GDPR, you have the following rights:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

To exercise these rights, please contact us at info.crimpin@gmail.com

8. Data Sharing and Third Parties

We share your data with the following third parties:

  • Stripe: For payment processing
  • OpenAI: For AI-powered content generation

All third parties are contractually obligated to protect your data and may only use it for specified purposes.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the EU. When this occurs, we ensure appropriate safeguards are in place through:

  • EU Standard Contractual Clauses
  • Adequacy decisions by the European Commission
  • Other legally recognized transfer mechanisms

10. Cookies and Tracking

Our service does not use cookies or tracking technologies. We prioritize your privacy and have designed our service to function without the need for cookies or similar tracking mechanisms.

Any essential session management is handled securely through standard authentication tokens that are automatically cleared when you log out or close your browser.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Regular security assessments
  • Access controls and authentication
  • Regular backups
  • Staff training on data protection

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • By email: info.crimpin@gmail.com
  • By mail: Canger & Shahab Crimpin GbR, Zum Steinberg 12, 69121 Heidelberg, Germany

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates data protection laws.