Privacy Policy

We collect information you provide directly to us, such as when you:

• Create an account and profile
• Upload CV documents and personal information
• Subscribe to our services
• Contact our support team
• Use our AI-powered CV analysis features

This may include your name, email address, employment history, education details, and CV content.

Under GDPR Article 6, we process your personal data based on:

• Contract Performance: To provide our CV services
• Legitimate Interest: To improve our services and customer support
• Consent: For marketing communications (with your explicit consent)
• Legal Obligation: To comply with UK and EU regulations

We use your information to:

• Provide and improve our CV analysis and improvement services
• Process payments and manage subscriptions
• Send service updates and important notifications
• Provide customer support
• Comply with legal obligations

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we use your data
• Object: Object to processing based on legitimate interests

We retain your personal data only as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

CV data is typically retained for the duration of your account plus 12 months, unless you request earlier deletion.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments and monitoring
• Limited access controls and staff training
• Secure cloud infrastructure (Supabase/AWS)

We send two types of emails:

• Transactional Emails: Essential account notifications, password resets, subscription confirmations, and receipts. You cannot opt out of these as they are necessary for the service.
• Marketing Emails: Product tips, onboarding guidance, CV writing advice, and career resources. You can opt in during signup or manage your preferences at any time.

Your Rights:

• All users receive a short onboarding email series (3-5 emails over 14 days) to help you get started
• Promotional emails are only sent if you've opted in
• Every email includes an unsubscribe link
• You can update your email preferences in your account settings

We use Mailerlite for email delivery. Mailerlite is GDPR-compliant and processes data according to our instructions.

We use the following third-party services that may process your data:

• Supabase: Database and authentication services
• Stripe: Payment processing
• OpenAI: AI-powered CV analysis (data anonymised)
• Mailerlite: Email delivery and marketing automation

All third parties are GDPR-compliant and process data according to our instructions.

Your data may be processed outside the UK/EEA. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by law