Privacy Policy

1. Who We Are

FreeCVT is a free, open-source CV/resume conversion tool hosted at freecvt.com. We are committed to protecting your privacy and handling your personal data in compliance with applicable laws, including Quebec's Act to modernize legislative provisions as regards the protection of personal information (Law 25, Bill 64).

2. Privacy Officer

In accordance with Quebec's Law 25, FreeCVT has designated Dany Hamel as the Privacy Officer responsible for the protection of personal information. You may contact the Privacy Officer at any time at admin@quantralux.com regarding questions about this policy, to exercise your rights, or to report a privacy concern.

3. How We Protect Your Files

Your privacy is at the core of FreeCVT's design. FreeCVT handles files in two ways depending on the tool type:

• Client-side tools (documents, images, text, data): Your files never leave your device. All processing happens in your browser — no server upload at all.
• Server-side tools (audio, video): Your file is uploaded to our Canadian server, converted via FFmpeg, and automatically and permanently deleted immediately after conversion. We never store or review your files.
• We have no access to the contents of your files beyond the milliseconds needed for processing.

4. Information We Collect

We collect only the minimum information necessary to operate and secure our service. This limited data comes from standard web server logs and includes:

• IP address
• Browser type and version
• Operating system
• Page request timestamps
• Referring URL (if any)

We do not collect personal identifiers such as names, email addresses, or the contents of any files you convert. We do not use analytics tracking tools, advertising pixels, or third-party trackers.

5. Purpose of Collection

The limited server log data described above is collected solely for the following purposes:

• Abuse prevention: Detecting and mitigating malicious usage, DDoS attacks, and automated scraping.
• Security: Maintaining the integrity and availability of our service.
• Aggregate statistics: Understanding overall traffic patterns (e.g., total visitors per month) without identifying individuals.

We do not use your data for marketing, profiling, advertising, or any purpose beyond the above.

6. Legal Basis (GDPR)

For visitors from the European Economic Area, our lawful basis for processing your personal data under the General Data Protection Regulation (GDPR) is legitimate interest (Article 6(1)(f)). Server log processing is necessary for security, abuse prevention, and service improvement. These interests do not override your rights and freedoms.

Under the GDPR, you have the right to access, rectify, erase, restrict processing, object to processing, and request data portability. To exercise these rights, contact our Privacy Officer at admin@quantralux.com.

7. Cookies

FreeCVT does not use any cookies. We do not set, store, or read any cookies on your device. No tracking cookies, advertising cookies, essential cookies, or any other type of cookie are used on our site.

The only persistent data is our server-side access logs (see Section 4), which cannot identify you as an individual across sessions.

8. Data Retention

• Server logs: Retained for a maximum of 90 days, after which they are permanently deleted.
• Cookies: We do not use any cookies, so no cookie data is retained.
• Client-side tool files: Zero file data retained — files never leave your browser.
• Server-side tool files (audio/video): Uploaded files are automatically and permanently deleted immediately after conversion. We do not store or review your files.

9. Your Rights Under Law 25 & GDPR

If you are a Quebec resident, Law 25 grants you the following rights regarding your personal information:

• Right of access: You may request confirmation of whether we hold any personal information about you and obtain a copy of that information.
• Right of rectification: You may request the correction of any inaccurate personal information.
• Right to erasure: You may request the deletion of your personal information when it is no longer necessary for the purpose for which it was collected.
• Right to data portability: You may request that your personal information be provided in a commonly used, machine-readable format.
• Right to object: You may object to the collection or use of your personal information at any time.

To exercise any of these rights, contact our Privacy Officer at admin@quantralux.com. We will respond within the timeframes required by law.

10. Cross-Border Transfers

FreeCVT does not transfer your personal data outside of Canada. All server log data is processed and stored on infrastructure located in Canada (OVH Montreal datacenter). For client-side conversions, no file data is transmitted to any server. For server-side conversions (audio/video), files are processed on our Canadian server and immediately deleted.

11. Incident Management

In the event of a confidentiality incident involving your personal information that presents a risk of serious injury, we commit to:

• Notifying the Commission d'accès à l'information (CAI) as required by law.
• Notifying all affected individuals as soon as possible, providing details of the incident and the steps being taken.
• Taking reasonable measures to reduce the risk of injury and prevent future incidents.

12. Complaints

If you believe your privacy rights have not been respected, you have the right to file a complaint:

• With our Privacy Officer: Contact Dany Hamel at admin@quantralux.com. We will investigate and respond promptly.
• With the CAI: You may also file a complaint directly with the Commission d'accès à l'information at www.cai.gouv.qc.ca.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of FreeCVT after any changes constitutes your acceptance of the updated policy.

We encourage you to review this policy periodically to stay informed about how we protect your privacy.