Privacy Policy

1. Who we are

The data controller is [COMPANY LEGAL NAME], [REGISTERED ADDRESS][, COMPANY NUMBER]. For any privacy questions, contact us at [PRIVACY EMAIL].

[If you have appointed a Data Protection Officer, name them and give contact details here. Delete if not applicable.]

2. Data we collect

We collect the following categories of personal data:

Account data — name, email address and password (or the identifier from your Google/LinkedIn sign-in).
Profile & career data — information you enter to build your CV, LinkedIn profile, applications, contacts and content (e.g. work history, education, skills).
Billing data — handled by our payment processor; we store [what you store, e.g. plan, last 4 digits, billing country] but not full card numbers.
Usage data — how you interact with the Service, device/browser information, and log data.
Communications — messages you send us and your support history.

3. How we use your data

To provide and operate the Service and its AI features.
To create and manage your account and subscription.
To process payments and prevent fraud.
To improve the Service and develop new features.
To communicate with you about your account, updates and (where permitted) marketing.
To comply with legal obligations.

[State whether AI features send user content to a third-party AI provider (e.g. Anthropic) and link to their terms. Be specific — this matters for transparency.]

4. Lawful basis for processing (UK/EU GDPR)

We rely on the following lawful bases: performance of a contract (to deliver the Service), legitimate interests (to improve and secure the Service), consent (for optional cookies and marketing), and legal obligation (e.g. tax records). [Adjust to match your actual processing.]

We do not sell your personal data. We share it only with service providers who help us run the Service, under contract. These include:

Processor	Purpose	Location
[Hosting provider]	Hosting & infrastructure	[Region]
[Auth provider]	Authentication / sign-in	[Region]
[Payment processor]	Billing	[Region]
[AI provider]	AI features	[Region]
[Analytics / email tool]	Analytics & comms	[Region]

6. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

7. Data retention

We keep your personal data for as long as your account is active, and afterwards only as long as needed for the purposes set out here or to meet legal obligations. [State your retention periods, e.g. account data deleted X days after closure.]

8. International transfers

Where we transfer data outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision. [Confirm and list, based on your processors above.]

9. Security

We use appropriate technical and organisational measures to protect your data, including [encryption in transit, hashed passwords, access controls, etc.]. No method of transmission or storage is 100% secure.

10. Your rights

Under UK/EU GDPR you have the right to access, rectify, erase, restrict or object to processing, and to data portability. You can withdraw consent at any time and lodge a complaint with the [ICO / your supervisory authority]. To exercise any right, contact [PRIVACY EMAIL].

11. Children

The Service is not directed to children under [16 / applicable age] and we do not knowingly collect their data.

12. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the "Last updated" date. [State how you notify users of material changes.]

13. Contact us

[COMPANY LEGAL NAME]
[REGISTERED ADDRESS]
Email: [PRIVACY EMAIL]

On this page