CVApplied — Privacy Policy

    Summary: CVApplied does not store your CV or personal data on our servers. CV analysis happens in-session only. We collect email addresses when you choose to submit them, and we use cookies for analytics.
  

1. Who We Are

CVApplied ("we", "us", "our") is an AI-powered CV analysis and building platform serving UK job seekers. Our website is www.cvapplied.com. For privacy enquiries, contact us at info@cvapplied.com.

2. What Data We Collect

CV Content

When you use our CV Analyser or CV Builder, your CV text is processed by our AI to generate your report. We do not store your CV content on our servers. CV data is processed in-session and discarded after your report is generated. We never sell, share, or retain your CV content.

Email Address

If you choose to save your report or sign up for updates, we collect your email address. This is stored securely with our email provider (ConvertKit/Kit). You can unsubscribe at any time via the link in any email we send.

Payment Information

Payments are processed by Stripe. We do not store card numbers or payment details. Stripe's privacy policy applies to payment processing: stripe.com/privacy.

Usage Analytics

We use Google Analytics 4 to understand how visitors use our site. This collects anonymised data including pages visited, time on site, device type, and approximate location (country/city level). No personally identifiable information is collected through analytics. You can opt out via Google's opt-out tool.

Access Codes

When you purchase Pro access, a unique access code is generated and emailed to you. We log the code and associated email for fraud prevention and customer support purposes only.

3. How We Use Your Data

To provide the CV analysis, building, and tailoring service
To send your report and access code by email where requested
To send product updates and announcements (email subscribers only — you can unsubscribe any time)
To process your subscription payment via Stripe
To improve our service through aggregated, anonymised analytics

We do not use your CV content to train AI models. We do not sell your data to third parties. We do not use your data for advertising.

4. Legal Basis for Processing (UK GDPR)

We process personal data under the following lawful bases:

Contractual necessity — to deliver the service you've signed up for
Legitimate interests — for analytics and service improvement
Consent — for marketing emails (you can withdraw consent at any time)

5. Data Retention

CV content: not retained — processed and discarded per session
Email addresses: retained until you unsubscribe or request deletion
Payment records: retained as required by UK financial regulations (typically 6 years)
Analytics data: retained per Google Analytics' default retention settings (14 months)

6. Your Rights (UK GDPR)

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Object to processing of your data
Data portability
Withdraw consent at any time

To exercise any of these rights, email info@cvapplied.com. We will respond within 30 days.

7. Cookies

We use the following cookies:

Google Analytics (_ga, _gid) — analytics cookies to understand site usage. These are set by Google.
Local storage — we use your browser's local storage (not a cookie) to remember your usage count and Pro access status. No personal data is stored in local storage.

You can disable cookies in your browser settings or use the Google Analytics opt-out extension.

8. Third-Party Services

Anthropic (Claude AI) — CV text is sent to Anthropic's API for analysis. Anthropic does not use API data to train models. Anthropic Privacy Policy
Vercel — our hosting provider. Vercel Privacy Policy
Stripe — payment processing. Stripe Privacy Policy
Resend — transactional email delivery. Resend Privacy Policy
ConvertKit/Kit — email marketing. Kit Privacy Policy

9. Data Security

We use HTTPS encryption for all data in transit. Our serverless functions run in isolated environments. We do not store CV content, minimising the risk of data breach. Payment data is handled entirely by Stripe's PCI-compliant infrastructure.

10. Changes to This Policy

We may update this policy from time to time. We will notify email subscribers of material changes. The date at the top of this page reflects the most recent update.

11. Contact

For any privacy-related questions or to exercise your rights, contact us at info@cvapplied.com.