Legal

Privacy Policy

Effective: 1 July 2026 · Questions: info@primelineagency.com

1. Who we are

PerformerCV is operated by Prime Talent Agency OÜ, a private limited company registered in Estonia (registry code 14469255, VAT ID EE102142701) (“we”, “us”, “our”). This Privacy Policy explains what personal data we collect when you use PerformerCV, how we use it, and your rights regarding that data.

2. Data we collect

We collect the following categories of data:

  • Account data: your name and email address, collected when you sign up via magic link or Google OAuth.
  • CV content: information you voluntarily enter into your CV — including name, photos, videos, professional background, contact details, visa information, and physical attributes. This information is publicly accessible via your CV link if you choose to publish it.
  • Payment data: payment processing is handled entirely by Stripe. We do not store your card details. We receive confirmation of successful payment and your billing country for VAT purposes.
  • Usage data: when someone visits your public CV, we record the visit (timestamp and profile ID) for your analytics dashboard. We do not track visitor identities or IP addresses.
  • Technical data: standard server logs (request time, user agent, HTTP status) used for security monitoring and debugging. These are not linked to individual accounts and are retained for up to 30 days.

3. How we use your data

  • To operate your account and deliver the service.
  • To display your public CV to visitors who have your link.
  • To process payments via Stripe.
  • To send authentication emails (magic links) via Resend.
  • To provide analytics on CV views in your dashboard.
  • To review Verified badge requests.
  • If you opted in: to share your profile with Prime Line Agency for talent consideration.

We do not sell your personal data to third parties. We do not use your data for advertising or profiling.

4. Third-party services

We use the following third-party services to operate PerformerCV:

  • Neon (neon.tech): Database hosting. Your account and CV data is stored on Neon's Postgres infrastructure.
  • Vercel (vercel.com): Hosting and deployment. Your requests are processed via Vercel's edge network.
  • UploadThing (uploadthing.com): Photo storage. Photos you upload are stored via UploadThing.
  • Bunny Stream (bunny.net): Video hosting. Videos you upload are processed and delivered via Bunny Stream.
  • Resend (resend.com): Transactional email. Used to send magic link sign-in emails.
  • Stripe (stripe.com): Payment processing. Stripe handles all card data and VAT calculation.
  • Google (accounts.google.com): OAuth sign-in. If you sign in with Google, we receive your name and email.

Each provider has its own privacy policy and is responsible for data processed on their infrastructure.

5. Your public CV

If you publish your CV, the information you choose to include becomes publicly accessible to anyone with your link. This may include sensitive categories of data such as physical attributes, citizenship, and visa status.

You are in full control of what you publish and can update or unpublish your CV at any time from your dashboard. Unpublishing removes the profile from public view immediately.

6. Agency opt-in

If you opt in to Prime Line Agency representation via your dashboard, your CV data may be shared with Prime Line Agency staff and, at their discretion, with promoters or employers considering your profile for opportunities.

The opt-in is off by default and can be revoked at any time. Revoking opt-in removes your profile from future agency consideration but does not retroactively delete data already shared.

7. Data retention

We retain your account and CV data for as long as your account is active. If you close your account, your data is deleted within 30 days, except where we are required by law to retain it longer (e.g. payment records for tax purposes — typically 7 years).

Media files (photos, videos) stored via UploadThing and Bunny Stream are deleted when you remove them from your CV or when your account is closed.

8. Your rights (GDPR)

If you are in the European Economic Area, you have the following rights regarding your personal data:

  • Right of access — request a copy of the data we hold about you.
  • Right to rectification — correct inaccurate data.
  • Right to erasure — request deletion of your data.
  • Right to portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on legitimate interests.
  • Right to restrict processing — request that we limit how we use your data.

To exercise any of these rights, email info@primelineagency.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

9. Cookies

PerformerCV uses only a session cookie required for authentication. We do not use tracking, advertising, or analytics cookies. No third-party cookies are set by our own pages.

Third-party embeds on public CV pages (YouTube, Bunny Stream) may set their own cookies subject to their respective privacy policies.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify users of material changes by email or via a notice in the dashboard before changes take effect.

11. Contact

Data controller: Prime Talent Agency OÜ
Registry code: 14469255 · VAT ID: EE102142701
Nurme põik 29-2, Haabneeme alevik, 74001 Viimsi vald, Estonia
Email: info@primelineagency.com