CVScouting
Rule-based processing only. Resumes are processed temporarily and are not stored permanently.

Processors & International Transfers

This page lists the service providers that process data for CVScouting and explains cross-border transfer safeguards.

Effective Date: February 23, 2026

Last Reviewed: February 26, 2026

Controller Address (Required)

Controller correspondence address:
Oficiu Postal Calea Republicii nr.71, Bl.M4, Marghita, cod postal 415300.

Summary

Resumes are processed temporarily and are not stored permanently. Where external providers are used, processing is limited to hosting, support communications, and optional analytics with consent.

Full legal context is available in the Privacy Policy.

Current processors (public list)

Hosting provider: Namecheap (Stellar hosting plan, US datacenter)

Role: Processor

Purpose: Infrastructure hosting for the Node.js/Next.js application.

Transfer location: US datacenter

Retention / notes: Raw server access logs: up to 2 months. Provider internal infrastructure backups: 3-7 days (provider-managed, same US datacenter; not customer-accessible; not guaranteed).

Email infrastructure: Zoho Mail (Zoho Corporation Pvt. Ltd.)

Role: Processor

Purpose: Support and operational email delivery and receipt.

Transfer location: EU data center (Zoho EU), with cross-border routing possible

Retention / notes: Support email communications: retained only as long as necessary to resolve the inquiry.

Analytics provider: Google LLC (Google Analytics 4)

Role: Processor

Purpose: Optional analytics only after explicit consent. Google Analytics 4 is used. The measurement ID is configured via environment variables.

Transfer location: US, cross-border processing possible

Retention / notes: GA4 analytics data: 2 months. Disabled by default; consent stored in localStorage; revoke disables future tracking.

Retention reference values

  • Resume file and extracted resume text: never stored.
  • Match result session summaries: 15 minutes (temporary local server session store).
  • sessionId in browser: session-only (sessionStorage).
  • Resume Builder draft data: until user clears browser data (localStorage only).
  • Rate-limit IP data: temporary local server storage with automatic cleanup.
  • Raw server access logs: up to 2 months.
  • GA4 analytics data: 2 months, only when analytics consent is given.
  • Support email communications: retained only as long as necessary to resolve the inquiry.
  • Active job listing summaries: stored while available from source providers.
  • Expired listing summaries: retained temporarily as unavailable listings.
  • Removed listing summaries: fully removed after 60 days from expiration (HTTP 410).
  • Provider internal infrastructure backups: 3-7 days (provider-managed, same US datacenter; not customer-accessible; not guaranteed).
  • stats-counter.json: kept while operationally necessary; reviewed periodically; deleted when no longer needed; numeric counters only.

International transfers and safeguards (Art. 44+)

Because hosting and analytics may involve the United States, international transfers can occur. Where required, transfers rely on Standard Contractual Clauses (SCCs) and supplementary safeguards such as minimization, consent-gated analytics, and limited technical data processing.

For full transfer details and rights information, see the Privacy Policy.