Privacy Policy

Who We Are

AnalyseMyCV ("we", "us", "our") is an AI-powered CV analysis service. This privacy policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For questions about this policy, contact us at: hello@analysemycv.co.uk

What Data We Collect

We collect the following categories of personal data:

• Account data: Your email address and a hashed (encrypted) version of your password when you register.
• Usage data: IP address, used solely to limit free anonymous usage and prevent abuse. Not linked to registered accounts.
• Analysis records: For registered users, each analysis you run is saved to your history so you can revisit it later. We store: the date, your uploaded document's filename (e.g. my_cv.pdf — not its contents), the job title and employer name extracted from the job description, your match score and sub-scores, the structured feedback the AI produces (rejection risk, missing keywords, fix priorities, structure and tone notes), and one short verbatim line from your CV that the AI selects as the basis for its rewrite example. The analysis content describes your CV and the job in the AI's own words, but in places it may quote short phrases from your CV — particularly in the "Before / After" example and when explaining whether you meet specific essential criteria. We also store the job description text so you can re-run an edited CV against the same job without re-pasting it. We store the full text of your CV only if you opt in — see "Your CV text — only if you opt in" below.
• Payment data: Payment processing is handled entirely by Stripe. We do not store or process card numbers. We receive a Stripe customer ID and a record of any one-off purchases only.

Your CV text — only if you opt in

By default we do not retain the full text of your CV or cover letter. It is processed in memory to generate your analysis, sent once to our AI provider (OpenAI), and then discarded — we do not write it to our database, retain it in logs, or share it with any third party other than to generate your analysis.

In your account settings you can turn on two separate, optional preferences that apply to every analysis you run:

• Keep my CV for 14 days (enables re-scan): if you tick this, we retain the full text of that CV for 14 days so you can re-run an edited version against the same job and see exactly what changed. After 14 days the CV text is automatically and permanently deleted, and re-scan for that report is no longer available — though the rest of the analysis record remains for its normal 90 days.
• Help improve the tool: if you tick this, we may use your retained submission to review and improve the quality of our analysis.

Both are optional and based on your consent (UK GDPR Article 6(1)(a)) — your analysis works either way. You can change or withdraw either preference at any time in your account settings: switching off CV retention immediately and permanently deletes every CV we hold for you and switches off re-scan for past reports. We do not use your CV to train AI models, and we never sell or share it.

The job description text is retained for all saved analyses (so you can iterate against the same job) and is deleted with the analysis record after 90 days, or sooner if you delete the analysis or your account.

If you delete an individual analysis from your history, that record — including any quoted CV line and any stored CV text — is permanently removed. If you delete your account, every analysis record associated with it is permanently removed.

How We Use Your Data

• To provide the CV analysis service and deliver results to you.
• To maintain your account and analysis history.
• To process one-off payments via Stripe.
• To prevent abuse of the free tier by tracking anonymous usage by IP address.
• Where you have opted in, to review and improve the quality of our analysis, and to keep your scoring consistent across re-runs — using the submission you consented to retain.
• To comply with our legal obligations.

We do not use your data for advertising. We do not sell your data to third parties. We do not use your CV content to train AI models.

Third-Party Services

We use the following third-party services to operate AnalyseMyCV:

• OpenAI: Your CV and job description text is sent to OpenAI's API to generate the analysis. OpenAI's data usage policy applies. OpenAI states that API data is not used to train models by default. See openai.com/policies/privacy-policy.
• Stripe: Payment processing. See stripe.com/gb/privacy.

Data Retention

Account data is retained for as long as your account is active. If you close your account, all associated personal data is deleted within 30 days.

Analysis records are automatically deleted 90 days after the date of analysis. This applies to every saved analysis, including the structured AI feedback, scores, filenames, and the single CV line quoted in the rewrite example. After 90 days the record is purged from our database and the associated PDF download is no longer available. We do this to limit how long any quoted CV content is held on our systems and to keep your account tidy. If you need to keep a copy of an analysis long-term, download the PDF before the 90 days are up.

If you opted in to keep your CV for re-scanning, that full CV text is deleted after 14 days — well before the 90-day record deletion — or immediately if you withdraw consent or delete the analysis or account. Once it's gone, re-scan is no longer available for that report.

Anonymous IP usage data is retained for 30 days and then automatically deleted.

Abuse-prevention exception (account deletion): when you delete your account we erase all personal data — your CV records, analysis results, name, password, and email address itself. To prevent abuse of the free tier through repeated account-creation cycles, we retain only a one-way cryptographic hash (SHA-256) of your email address, together with a count of how many free analyses you had used. The hash is irreversible: nobody (us, an attacker who breaches our database, anyone) can recover your email from it. We use it solely to recognise a re-registration attempt with the same address and apply your prior free-tier usage. The legal basis is legitimate interests (fraud and abuse prevention) under UK GDPR Article 6(1)(f). You can opt out of this beacon by emailing hello@analysemycv.co.uk — we will remove your hash on request.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to processing of your data.
• Request restriction of processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time where processing is based on consent.

Self-service is fastest. If you have access to your account, you can fulfil two of these rights instantly without contacting us:

• Access & portability: on your account page, use the Download my data button to get a JSON file with every piece of personal data we hold about you.
• Deletion: the same page has a Delete account option that permanently removes everything we hold about you.

If you have lost access to your account, or you want to exercise any other right (correction, restriction, objection, withdrawal of consent), email hello@analysemycv.co.uk. We will respond within 30 days.

Cookies

We use a single session cookie to keep you logged in to your account. This is a strictly necessary cookie and does not require your consent under UK GDPR. We do not use advertising, tracking, or analytics cookies.

Security

We take reasonable technical and organisational measures to protect your data. Passwords are hashed using industry-standard algorithms and are never stored in plain text. All data is transmitted over HTTPS.

Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of any material changes by email. Continued use of the service following notification constitutes acceptance of the updated policy.

Contact & Complaints

For any privacy-related questions, contact us at hello@analysemycv.co.uk.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.