Draft: not yet reviewed by a lawyer. Text in square brackets is still to be filled in.
Privacy Policy
Effective date: [effective date]
1. Who we are
CV Boost is a website and mobile app that compares your CV with a job advert, and helps you tailor your CV and write a cover letter. It is operated by [Company legal name], [registered address] ("CV Boost", "we", "us"). We are the controller of the personal data described here. Contact: [privacy email].
2. What we collect
| Data | Examples | Where it comes from |
|---|---|---|
| Your CV | Work history, education, skills, and your name, email, phone and location | You upload or paste it |
| Job adverts | The text of adverts you paste | You |
| Your answers | Short answers to questions we ask before tailoring | You |
| What we create for you | Match scores, tailored CV versions, cover letters, exported files | Created from the above |
| Tracker details | Company, role, status, notes, follow-up dates | You |
| Account details | Email, name, sign-in provider ID, country | You, through Google, Apple or email sign-in |
| Purchase details | Plan, credits, purchase history | Our checkout provider, the App Store or Google Play |
| Usage and device data | Pages and screens used, timings, browser or device type, app version, IP address, error logs | The website and app |
| Cookies | A sign-in cookie; analytics cookies if you accept them | Your browser |
| Support messages | What you write to us | You |
We do not receive your payment card details; our checkout provider and the app stores handle payment.
Your CV file. We read the text from your file and then delete the file, normally within minutes. We keep the text in a structured form until you delete it.
Details we leave out. When we read your CV, we do not keep date of birth, national identity numbers, marital status, religion, or nationality, and we do not take a photo from your CV, even if it contains one. If you choose to add a photo in the design panel, we store it only to place it on your CV, never send it to AI models, and delete it when you remove it or delete your account. Please do not put health information or other sensitive details in your CV or answers.
Using CV Boost without an account. You can get a first match score without signing up. That CV and result are kept for up to 7 days and then deleted unless you create an account.
Other people. A CV sometimes names referees or colleagues. Only upload a CV that is your own, and only include other people's details if you have their permission.
3. How we use your data
| Purpose | Legal basis (EU and UK) |
|---|---|
| Score your CV against an advert, tailor it, write cover letters and create export files | Performance of our contract with you; for the free score before sign-up, steps taken at your request |
| Keep your applications and tracker | Performance of our contract with you |
| Manage your account, credits and plan | Performance of our contract with you |
| Send receipts and service messages | Performance of our contract with you |
| Send follow-up reminders you switch on | Your consent |
| Measure how the website and app are used | Your consent for analytics cookies; otherwise our legitimate interests |
| Prevent abuse and keep the service secure | Our legitimate interests |
| Review AI results you report to us, and improve our instructions to the AI | Our legitimate interests |
| Meet legal and tax obligations | Legal obligation |
We do not sell your personal data, show you advertising based on your CV, or share your CV with employers or recruiters. You send your CV to employers yourself.
4. How AI is used
- AI reads and rewrites your CV. We send the text of your CV, the advert and your answers to AI models that produce the score, the tailored CV and the cover letter. Your contact details are not sent to the models that do the scoring and rewriting.
- Nothing is invented on purpose. The service is designed to use only what your CV and answers say, and a second check compares the rewrite with your original. AI can still make mistakes, so read every change before you send your CV. You are responsible for what you send.
- The score is guidance. It is an estimate of how well your CV matches an advert's wording and requirements. It is not a prediction of whether you will be interviewed, and no employer sees it. No decision with legal effect is made about you.
- Your content is not used to train AI models. Our agreements with our AI providers do not allow it. [Lawyer and owner: confirm in each provider's terms.]
5. Who we share data with
| Recipient | What they receive | Why |
|---|---|---|
| [text-model providers] | CV text, advert text, answers | Scoring, tailoring, cover letters |
| [sign-in provider] | Email, sign-in ID | Signing you in |
| [web checkout provider] | Email, country, purchase details | Payment, tax and invoices on the web; they act as seller of record |
| Apple, Google, RevenueCat | Purchase details, user ID | Purchases in the mobile apps |
| [hosting provider] | All stored data, encrypted | Hosting |
| [email provider] | Email address, message content | Receipts and reminders |
| [analytics provider], [error-reporting provider] | Usage events and error logs, without CV text | Finding faults and improving the product |
We may also disclose data if the law requires it, or to a buyer if CV Boost is sold, in which case this policy continues to apply.
6. How long we keep data
| Data | Kept for |
|---|---|
| Uploaded CV file | Deleted after reading, and in any case within 24 hours |
| CV text, adverts, answers, tailored versions, letters, tracker | Until you delete them, or 24 months after you last used CV Boost |
| Results made without an account | 7 days |
| Exported files | 7 days; you can create them again |
| Account details | Until you delete your account |
| Purchase records | As long as tax rules require; kept without your identity after account deletion |
| Usage data | Up to 14 months |
| Backups | Up to 30 days |
7. Your choices and rights
In your settings you can view, correct or delete your CV; delete any application; download all your data; turn reminders off; and delete your account, after which we delete or anonymise your data within 30 days. On the website you can change your cookie choice at any time.
Depending on where you live, you may also have the right to access, correct, delete, restrict or object to our use of your data, to receive it in a portable format, and to withdraw consent. Write to [privacy email]; we reply within 30 days. If you are in the EU or UK, you can also complain to your data-protection authority.
8. Security
We encrypt data in transit and at rest, add extra encryption for CVs and letters, limit who can access data, and log every staff access to a user's CV. Staff open a CV only to handle a support request or a report you sent us. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
9. Where your data is processed
Our servers are in [hosting provider and region], and our providers process data in other countries, including the United States. Where the law requires, we use approved safeguards such as standard contractual clauses.
10. Children
CV Boost is for people aged [minimum age] and over. We do not knowingly collect data from anyone younger.
11. Changes and contact
We will post changes here and update the effective date, and notify you before a significant change takes effect. [Company legal name], [registered address], [privacy email].