Privacy policy

CEOMaker (ceomaker.app) is operated by Riad Hallouch, an individual based in Algeria. For the personal data of the people who sign up, we decide what is collected and why: in data protection terms, we are the controller. You can reach us at riadhallouch447@gmail.com.

The sites our customers publish have visitors too. Messages a visitor sends through a site's contact form are delivered to the site's owner, who decides what to do with them; we store and deliver them on the owner's behalf.

• Your account: your name and email address, and your Google profile picture if you sign in with Google. We use them to sign you in and to contact you about your account.
• Sign-in sessions: the network address and browser of each signed-in device, to keep your account secure and let you sign out everywhere.
• Your answers and your site: the answers to the setup questions, your site's text, colours and settings, every version you publish, and the images you upload. We need them to build, store and show your site.
• Your CV, if you attach one: it is sent once to our AI provider to write your first draft. We don't store the file.
• AI usage: how many drafts and rewrites you requested, to apply daily limits and keep costs in check. Not the content itself.
• Payments, once paid plans start: Freemius handles checkout as the merchant of record. We receive your plan and its status, never your card details.
• Unfinished answers are kept in your own browser for up to a week so you can come back to them, and are cleared once you have a site or sign out.

Customer sites set no cookies. To give owners simple visitor statistics we record:

• the page viewed, and whether the visitor clicked an email, phone or social link;
• where they came from (for example LinkedIn, Google or another site);
• the type of device (phone, tablet or computer);
• an approximate location, no more precise than a city, from the network;
• a code made from the network address and browser that changes every day, so visitors can be counted once per day. We never store the network address itself.

When a visitor uses a contact form, we store what they type (name, email, organisation, topic and message) and deliver it to the site's owner. We also keep a coded form of their network address, which can't be turned back into the address, to stop the same sender flooding a site.

• To provide the service you asked for (your account, your site, your messages): this is necessary for our contract with you.
• Our legitimate interests: keeping accounts and sites secure, preventing abuse, and giving owners privacy-friendly statistics about their own sites.
• Legal obligations: payment and tax records, kept by our payment provider for as long as the law requires.

ceomaker.app uses only the cookies needed to keep you signed in. They are not used for advertising or tracking, and customer sites set none at all. That is why there is no cookie banner.

We use a small number of providers, each only for what it does for us:

• Vercel hosts the app and the sites (servers in Frankfurt, Germany).
• Neon hosts the database (Frankfurt, Germany).
• Resend sends our emails: sign-in links and account notices.
• Anthropic writes AI drafts from your answers and, if attached, your CV.
• Google signs you in, if you choose Continue with Google.
• Freemius handles payments, once paid plans start, as merchant of record.

Some of these providers are based in the United States, so data can be transferred outside the European Economic Area. We rely on the safeguards in their data processing terms, such as the European Commission's standard contractual clauses. We don't sell personal data or share it for advertising.

• Your account and your site: until you delete them.
• Deleting your site removes every version, your images, its messages and its statistics. Deleting your account removes everything it owns.
• If your site was ever published, its address (only the name) stays reserved for 90 days after deletion, so nobody else can take over links that still point to it.
• Contact-form messages: until the owner deletes them or deletes the site.
• Sign-in links: they work once and expire after 15 minutes.
• Payment records: as long as tax law requires, kept by Freemius.

You can see and correct your details, and delete your site or your whole account, at any time in Settings. You can also ask us for a copy of your data, ask us to correct or delete it, or object to how we use it, by writing to riadhallouch447@gmail.com. We answer within 30 days.

If you are in the European Union or the United Kingdom, you can also complain to your local data protection authority.

Visitors who wrote to a site through its contact form can ask its owner, or us, to delete their message.

Connections are encrypted, sign-in needs no password (single-use email links or Google), and uploads and content are checked before they are stored. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

CEOMaker is for professionals and isn't meant for anyone under 16.

If we change this policy in a way that matters, we will email account holders before the change takes effect. The date at the top always shows the latest version. See also our terms.