Privacy Policy

Last updated: June 2026

This Privacy Policy explains how CVforJob collects, uses, and protects your personal data. CVforJob processes information contained in CVs — including your name, contact details, employment history, qualifications, and personal statements. This is personal data, and some of it is sensitive, under the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK GDPR. We take that responsibility seriously.

1. Who we are

CVforJob (cvforjob.com) is the data controller for the personal data described in this policy. If you have any questions about your data, contact us at hello@cvforjob.com.

2. What data we collect

Email address — provided when you create an account.
CV content — the text extracted from the PDF you upload, including your skills, work history, education, and personal details.
Usage data — the number of generations you have used and your plan type.
Technical data — browser type and IP address, used for security and abuse prevention purposes only.

3. Why we collect it (legal basis)

Email — performance of a contract: to create and operate the account you signed up for.
CV content — performance of a contract: to generate the tailored CV and cover letter you asked us to produce.
Usage data — legitimate interest: to enforce fair free-tier usage limits and keep the service sustainable.

4. How we use your data

To generate tailored CVs and cover letters.
To send account confirmation and essential service emails.
To enforce free and Pro tier limits.
We never sell your data to third parties.
We never share your CV with employers without your explicit action (you choosing to download it).
We never use your CV to train AI models.

5. How long we keep it

Account data — until you delete your account.
CV content — stored locally in your browser (localStorage). It is not stored on our servers in the current version of the service.
Email address — until your account is deleted.

6. Your rights under GDPR

You have the right to:

Access the personal data we hold about you.
Erase your data (delete your account).
Receive your data in a portable format (data portability).
Object to processing based on legitimate interest.
Lodge a complaint with the Data Protection Commission (Ireland) at www.dataprotection.ie.

To exercise any of these rights, email hello@cvforjob.com.

7. Cookies

We use essential cookies only.
No advertising cookies.
No tracking cookies.
Supabase uses a session cookie to keep you signed in.

8. Third-party processors

We use a small number of trusted processors to run the service. Where a processor is based outside the EU/EEA, transfers are protected by Standard Contractual Clauses (SCCs).

Supabase — database and authentication — EU servers.
Anthropic — CV generation — US based; Standard Contractual Clauses apply.
Vercel — hosting — US based; Standard Contractual Clauses apply.
Resend — transactional email — EU based.

9. Contact

For any privacy question or request, contact us at hello@cvforjob.com.