Privacy Policy

Who we are

MyCVStack (mycvstack.com) is responsible for your personal data. Contact: support@mycvstack.com .

What we collect, why, and our lawful basis

• Account: name, email address and password (stored hashed). If you log in with Google, GitHub or LinkedIn, we receive your name, email address, account ID and profile picture link from them. Basis: contract.
• Your content: the CVs and job adverts you add or upload, any instructions you give, the tailored CVs we produce, and any application details you add, including a contact person's details and notes. Basis: contract.
• Payments: your customer ID at our payment provider, what you bought, the amount, and payment and subscription status. You enter card details into the payment provider's form; they never reach our servers. Basis: contract, and legal obligation for accounting records.
• Emails: messages about your account and purchases. Basis: contract.
• Technical data: IP address, browser and device information, and server logs and error reports. Basis: legitimate interests (keeping the service secure, preventing abuse, fixing errors).
• Usage statistics: cookieless visit and event counts, without your name, email address or CV content. Basis: legitimate interests (understanding how the site is used).

You need an email address and a password or social login to have an account. The rest is needed only for the features you use.

CVs often include other people's details, such as referees, and can include sensitive information. Only add what you need, and leave out sensitive details such as health information or national insurance numbers.

AI processing

When you import a CV or create a tailored CV, we send the CV text, the job advert and your instructions to an AI provider to produce the result. Referees are left out when tailoring, but when you import a file, all of its text is sent, referees included. The AI only writes text for you; it makes no decisions about you.

Who we share data with

We share data only with service providers that process it for us:

• hosting and network security
• payment processing
• email delivery
• AI processing of your CV and job advert
• error monitoring
• usage statistics

If you log in with Google, GitHub or LinkedIn, they handle your data under their own policies.

We may disclose data if the law requires it, or to a buyer if the business is sold. We don't sell personal data.

International transfers

Some providers process data outside the UK, including in the US, under appropriate safeguards.

How long we keep data

• Account and content: until you delete your account from your profile. Deletion removes it from our database straight away; copies stay in encrypted backups for up to 35 days.
• Payment records: Our payment provider keeps them as the law requires. Our own copies are deleted with your account and stay in encrypted backups for up to 35 days.
• Logs and error reports: only as long as needed to run and secure the service.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, or to receive it in a portable format. Email support@mycvstack.com . You can delete your account yourself at any time. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

See our Cookie Policy .

Children

MyCVStack is not for anyone under 18.