Privacy policy

Your CV contains a lot of personal information. This policy explains, in plain English, what we collect, why, who we share it with and how long we keep it. aicv.guru is run by the operator of aicv.guru (“we”, “us”), the data controller for the purposes of UK GDPR. Contact us at [email protected].

What we collect

• Your CV and anything you paste in (such as a job advert or target role). CVs typically include your name, contact details, work history, education and skills.
• Account details if you sign up: name, email address and a hashed password.
• Payment details if you subscribe. Payments are handled by Stripe; we never see or store your full card number.
• Technical data: IP address, a random browser identifier cookie (so guests can get back to their CV and so we can apply fair-use limits), and server logs.

How we use it

• To read, score and rewrite your CV and produce the files you download (performing our contract with you).
• To run your account, apply plan limits, and handle billing (contract).
• To prevent abuse and keep the service secure, using rate limits and logs (legitimate interests).
• To send essential service emails such as sign-in or password-reset links. We don't send marketing emails without your consent.

Please don't include special-category information (such as health details, religion or ethnicity) in your CV unless you're comfortable with it being processed as described here.

AI processing

To improve your CV we send its contents (and any job advert you provide) to our AI provider, Anthropic PBC, via its commercial API. Anthropic processes this data on our behalf to generate a response and, under its commercial terms, does not use it to train its models. Anthropic is based in the United States; transfers are covered by appropriate safeguards such as the UK International Data Transfer Addendum / Standard Contractual Clauses. No decision with legal or similarly significant effect is made about you automatically: the AI only suggests text for you to review.

Who else we share it with

• Anthropic (AI processing, as above).
• Stripe (payments, if you subscribe).
• Our hosting provider, which stores the service's data in the United Kingdom/EU.
• Our email delivery provider, to send account emails.

We never sell your data or share your CV with recruiters or employers.

How long we keep it

• Original uploaded files: deleted automatically within 24 hours.
• Guest CVs (no account): deleted automatically 24 hours after upload.
• Saved CVs (account holders): kept until you delete them or your account. When you delete a CV, its contents are erased immediately; we keep only a content-free record of the date so monthly limits work.
• Account data: until you delete your account (one click on your account page). Billing records are kept as long as the law requires (usually six years).
• Server logs: up to 30 days.

Your CV content is encrypted at rest in our database.

Cookies

We use only strictly necessary cookies: a session cookie, a security (CSRF) cookie, a “remember me” cookie if you sign in, and a random guest identifier cookie so you can return to a CV you made without an account. Your light/dark theme choice is stored in your browser's local storage. We don't use advertising or third-party analytics cookies.

Your rights

You can ask to access, correct, delete, restrict or export your personal data, and object to processing. Most of this you can do yourself in your account. For anything else, email [email protected]. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Changes

If we change this policy in a meaningful way we'll update the date above and, for account holders, let you know by email.