Privacy Policy

1. Information We Collect

When you create an account, we collect your name, email address, and encrypted password. If you use social login (Google, GitHub, or LinkedIn), we receive your name, email address, and profile picture from the provider.

The core of our service involves collecting your professional information—work history, education, skills, certifications, projects, and other CV content you choose to provide. When you tailor a CV, we also collect the job title, company name, and job description you're applying to.

For payments, we collect your billing address. Payment card details are processed securely by Stripe and never stored on our servers.

Like most websites, we automatically collect technical information including your device type, browser, IP address, and how you interact with our service. We use cookies and similar technologies to maintain your session and remember your preferences.

2. How We Use Your Information

We use your information to provide and improve our CV tailoring service, process payments, manage your credit balance, and send you important updates about your account. We analyze usage patterns to understand how people use our service and make it better.

We also use your information to detect and prevent fraud, respond to your support requests, and ensure the security of our platform.

3. AI Processing and Third-Party Services

OpenRouter AI Service

When you use our CV tailoring feature, we send your CV content and job description to OpenRouter, our AI service provider. This data is processed to generate tailored CVs and suggestions. OpenRouter processes this data according to their privacy policy, but we do not store your CV data on their servers beyond the processing time.

Important: Do not include sensitive personal information (such as national insurance numbers, financial details beyond what's typical for a CV, or health information) in your CV or job descriptions.

Stripe Payment Processing

Payment processing is handled by Stripe. We do not store your full credit card details. Stripe processes your payment information according to PCI-DSS standards. See Stripe's Privacy Policy.

Social Login Providers

When you use social login, Google, GitHub, or LinkedIn may collect information according to their own privacy policies.

4. Data Sharing and Disclosure

We do not sell your personal information. We share your information only with service providers who help us operate our platform (OpenRouter for AI processing, Stripe for payments, and email service providers), when required by law, in connection with a business transfer such as a merger or acquisition, or with your explicit consent.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You can request a copy of your data, request deletion of your account and associated data, or export your CVs in JSON or PDF format at any time.

After account deletion, we may retain anonymized, aggregated data for analytics purposes.

6. Your Rights (UK GDPR / Data Protection Act 2018)

Under UK data protection law, you have the right to access your personal data, request correction of inaccurate data, request deletion of your data ("right to be forgotten"), restrict how we process your data, receive your data in a portable format, object to processing, and withdraw consent at any time.

To exercise these rights, contact us at support@mycvstack.com.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption, secure servers, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as standard contractual clauses and data processing agreements with our service providers.

9. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Significant changes will be communicated via email.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at support@mycvstack.com.