Back to Home

Privacy Policy

Last updated: April 5, 2026

1. Overview

This Privacy Policy describes how CVCircuit ("we", "us", "our") collects, uses, discloses, and protects information when you access or use our website, applications, and related services (collectively, the "Service").

By using the Service, you agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account we collect information such as your email address and credentials required to authenticate you.

2.2 CV / Resume Data

The Service allows you to enter information that may be included in a CV/resume, such as your name, contact information, work history, education, skills, and other career-related information ("CV Data").

2.3 Job Description and Tailoring Inputs

If you use tailoring features, you may submit job descriptions, role requirements, or other text that you want to tailor your CV to ("Tailoring Inputs"). When using the CVCircuit browser extension, job details (such as job title, company name, and job description) may be automatically extracted from supported job board pages (including Indeed, LinkedIn, Glassdoor, Reed, Totaljobs, Monster, and CV-Library) to pre-populate the tailoring flow. This content is read locally within your browser and sent to our servers only when you initiate a tailoring action.

2.4 Usage and Device Data

We may collect information about how you use the Service, such as pages visited, features used, timestamps, approximate location derived from IP address, device/browser characteristics, and diagnostics.

2.5 Payment Data

If you purchase a subscription, payments are processed by third-party payment processors. We do not store full payment card numbers. We may receive limited billing-related metadata such as subscription status, plan, and timestamps.

3. How We Use Information

We use information for purposes including:

  • Providing and operating the Service (account creation, CV generation, exporting, support).
  • Processing your requests and delivering requested outputs (for example, tailored CV exports).
  • AI-powered CV tailoring: when you request a tailored CV, your CV Data and Tailoring Inputs are sent to a third-party AI provider (OpenAI) to generate tailored content. This data is processed solely to fulfil your request and is not used by OpenAI to train their models under our API agreement.
  • Improving, monitoring, and securing the Service (fraud prevention, debugging, performance).
  • Communicating with you about the Service (service messages, confirmations, support).
  • Marketing and promotion of our Service. CV Data may be used to influence our own marketing (for example, understanding which features are most valuable or what templates are popular), but your CV Data is not sold or provided to third parties for their marketing.

4. How We Share Information

We do not sell your personal information. We may share information only as described below:

  • Service providers: We use vendors to help us operate the Service (for example, hosting, database storage, authentication, email delivery, analytics, payment processing, and content-generation infrastructure). These providers are permitted to process data only on our instructions. Key providers include Amazon Web Services (hosting and storage), Stripe (payment processing), and OpenAI (AI-powered CV tailoring).
  • Legal and safety: We may disclose information if required by law or if we believe disclosure is necessary to protect rights, safety, prevent fraud, or respond to lawful requests.
  • Business transfers: If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.

Important: We do not provide your CV Data to third parties for their use or marketing.

5. Chrome Browser Extension

The CVCircuit Chrome extension enhances your experience when browsing job listings. The following applies specifically to the extension:

  • Job board page reading: The extension reads content from supported job board pages (Indeed, LinkedIn, Glassdoor, Reed, Totaljobs, Monster, CV-Library) solely to extract job details for use in your tailoring request. This content is not stored or shared beyond what is needed to fulfil your request.
  • Local storage: The extension stores your authentication token and selected CV in Chrome's local extension storage to keep you logged in between sessions. This data stays on your device and is not accessible to other extensions or websites.
  • No background tracking: The extension does not monitor your browsing history, track pages you visit outside of supported job boards, or collect any data when you are not actively using the extension.

6. Cookies and Similar Technologies

We use cookies and similar technologies only to the extent necessary to provide the Service and keep it secure. These may include cookies required for authentication, session management, security, load balancing, and user preferences.

We do not intentionally use non-essential cookies for advertising purposes. If we introduce analytics or marketing cookies in the future, we will update this Privacy Policy and, where required, provide appropriate choices.

7. Data Retention

We retain personal information only as long as necessary to provide the Service and for legitimate business purposes such as maintaining records, complying with legal obligations, resolving disputes, and enforcing agreements.

You may delete CVs and other content within the Service at any time. Some information may remain in logs or backups for a limited period before being purged.

8. Security

We implement reasonable administrative, technical, and organisational measures designed to protect information. However, no system can be guaranteed 100% secure, and we cannot guarantee absolute security.

9. Your Rights (UK/EU Users)

If you are located in the UK or European Economic Area, you have the following rights under UK GDPR / GDPR in relation to your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data in certain circumstances.
  • Restriction: Request that we restrict processing of your data in certain circumstances.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us through the support channels available in the Service. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Children’s Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children.

11. International Transfers

Your information may be processed and stored outside the UK or EEA, including in the United States (for example, via AWS and OpenAI). Where such transfers occur, we take steps to ensure appropriate safeguards are in place in accordance with applicable data protection law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by other means. Continued use of the Service after an update constitutes acceptance of the updated Privacy Policy.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the support channels available in the Service or via the contact details on our website.