Privacy Policy

Last updated: July 2026

This Privacy Policy explains how CVforJob collects, uses, and protects your personal data. CVforJob processes information contained in CVs — including your name, contact details, employment history, qualifications, and personal statements. This is personal data, and some of it is sensitive, under the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK GDPR. We take that responsibility seriously.

1. Who we are

CVforJob (cvforjob.com) is the data controller for the personal data described in this policy. If you have any questions about your data, contact us at hello@cvforjob.com.

2. What data we collect

Email address — provided when you create an account.
CV content — the text extracted from the PDF you upload, including your skills, work history, education, and personal details.
Usage data — the number of generations you have used and your plan type.
Technical data — browser type and IP address, used for security and abuse prevention purposes only.
Analytics data — when you visit the site we measure page views, which page was viewed, the site or link that referred you (for example a search engine or a social media link), and derived details such as device type, browser, and approximate country. This is collected without cookies and does not identify you personally.
Contact messages — if you message us through the contact page, we process the name, email address, and message you send us, solely so we can reply to you.

3. Why we collect it (legal basis)

Email — performance of a contract: to create and operate the account you signed up for.
CV content — performance of a contract: to generate the tailored CV and cover letter you asked us to produce.
Usage data — legitimate interest: to enforce fair free-tier usage limits and keep the service sustainable.
Analytics data — legitimate interest: to understand how people find CVforJob and which pages are useful, so we can improve the service. You can object to this at any time (see Section 6).
Contact messages — legitimate interest: to answer the question or request you sent us. We do not use your contact details for marketing.

4. How we use your data

To generate tailored CVs and cover letters.
To send account confirmation and essential service emails.
To enforce free and Pro tier limits.
We never sell your data to third parties.
We never share your CV with employers without your explicit action (you choosing to download it).
We never use your CV to train AI models.

5. How long we keep it

Account data — until you delete your account.
CV content — your working draft is stored locally in your browser (localStorage). Generated CVs and cover letters are saved to your account history so you can reopen them from “My CVs”; they are deleted when you delete your account.
Email address — until your account is deleted.

6. Your rights under GDPR

You have the right to:

Access the personal data we hold about you.
Erase your data (delete your account).
Receive your data in a portable format (data portability).
Object to processing based on legitimate interest.
Lodge a complaint with the Data Protection Commission (Ireland) at www.dataprotection.ie.

To exercise any of these rights, email hello@cvforjob.com.

7. Cookies & local storage

We use essential cookies and browser storage only.
No advertising cookies.
No tracking or analytics cookies.
Our analytics (see Section 8) are cookieless: they measure visits and referrers without setting any cookie and without tracking you across other websites — which is why the line above stays accurate.
Your sign-in session and working CV draft are kept in your browser's local storage — strictly necessary to make the service work.

8. Third-party processors

We use a small number of trusted processors to run the service. Where a processor is based outside the EU/EEA, transfers are protected by Standard Contractual Clauses (SCCs).

Supabase — database and authentication — EU servers.
Anthropic — CV generation — US based; Standard Contractual Clauses apply.
Vercel — hosting and cookieless web analytics — US based; Standard Contractual Clauses apply.
Resend — transactional email — EU based.

9. Contact

For any privacy question or request, contact us at hello@cvforjob.com.