Privacy Policy

Dossiers ("we", "us") lets you turn a CV or LinkedIn profile into a downloadable CV and a shareable page. This policy explains what personal data we handle, why, and how you stay in control of it. The service is operated by Jon Horvath. If you have any questions, email hello@dossiers.me.

What we collect

• Your email address — used only to sign you in (we email a one-time code) and to tie a published dossier to your account. We do not use it for marketing.
• The content you create or import — the text, links, and images that make up your dossier. If you import a CV or LinkedIn export, whatever you bring in becomes part of that content, which may include your work history, education, skills, and a photo.
• A session cookie — a single strictly-necessary cookie (`sid`) set after you sign in, so you stay signed in. No advertising or tracking cookies.

Files you upload for parsing (PDF, Word) are read in your browser to draft your cards — the file itself is not uploaded to our servers.

Where it's stored

Account and dossier data is stored using Upstash (a managed Redis service) and served through Vercel. Sign-in code emails are sent through Resend. These providers process data on our behalf as sub-processors.

Analytics

We use PostHog (hosted in the EU) to understand how the product is used — which features people reach and where they get stuck — so we can improve it. It's set up to be light-touch: it stores its data in your browser's local storage rather than in a cookie, we don't record your screen, and we never use it for advertising or sell it. If you'd rather not be measured, you can turn on your browser's "Do Not Track", block the analytics domain, or email us to be excluded.

What's public

Anything you publish to a dossiers.me/<handle> page is public by design — that's the point of the page. Only publish what you're happy for anyone to see. Content you keep in the editor and have not published is not public.

Why we can process it

We process your data to provide the service you've asked for (a contract), and to keep the service secure and working. We don't sell your data or share it for advertising.

How long we keep it

We keep your account and dossier until you delete them. You can delete everything at any time from the publish panel — Delete account removes your published page, your account record, and your session. Unpublishing takes your page offline while keeping your account. Sign-in codes expire within ten minutes.

Your rights

If you're in the UK or EU you have rights to access, correct, delete, and export your personal data, and to object to certain processing. You can delete your data yourself in the app; for anything else, email hello@dossiers.me and we'll help. You can also complain to the UK Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.

Children

Dossiers isn't intended for people under 16. Please don't use it if you're younger than that.

Changes

We may update this policy as the product grows. We'll change the date at the top when we do.