Privacy Policy

1. What We Collect

When you use CV Mentor, we collect the following data:

• The CV/resume file you upload (text content only)
• The optional job description you provide
• Your email address — running an analysis creates an account for it (with no password; sign-in works by emailed link), and that account is where your results and job matches live
• Payment information (processed by Stripe — we never see your card details)

2. How We Use Your Data

Your CV text is sent to an AI provider solely for the purpose of generating your analysis report and scoring job postings against your CV. We do not use your data for training AI models, marketing, or any other purpose.

Before it is sent, we replace the direct identifiers we can find in your CV — your name, email address, phone number and profile links — with placeholders, and put the real values back into the result you receive. The provider sees your experience, not your contact details. This is not the same as anonymity: a name that appears only inside a sentence, or details we do not recognise, can still be included.

If your match digest is switched on, we also email you the best new job postings that match your CV. Every one of those emails has a one-press unsubscribe, and you can change or stop them from your dashboard at any time.

3. When you apply to a company through CV Mentor

Some jobs on the board were posted here by the company itself, and for those you can send your application through CV Mentor. Until you press send, the application you prepared is a private draft in your account that no company can see.

Pressing send is what shares your application with that company: your cover letter, your answers to its questions, the text of your CV and your email address. Nothing is shared before you press it, and nothing else in the product can press it for you.

From then on, the company is an independent controller of the copy it received. It may use that copy only to assess your application, and its own privacy policy governs what it does with it. We keep our copy in your account under the retention rules in section 4, so deleting your account removes our copy, not the company's.

The company can mark your application as reviewing, shortlisted or not proceeding on its own dashboard. Those marks are its internal notes and are not shown to you; if it wants to tell you something, it writes to you.

If you post a job, we process your company name, your contact email and the posting itself to publish the posting and route applications to you. We keep view and email counts per posting per day, with no candidate identities in them.

4. Data Retention

Your CV documents, analyses and rewrites live in your account, along with your profile and coin balance, for as long as the account exists — so you can return to your dashboard and see them again. There is no separate expiry: they are kept until you delete the document, delete your account, or ask us to.

Transient processing copies of your CV text and job description, used while an analysis is running, are cleared when it completes.

Payment records, including what was submitted for a purchased analysis, are kept as required for tax and financial regulations; card handling is Stripe's, in accordance with their privacy policy.

5. Third-Party Services

• Anthropic — the AI provider that processes your CV text for analysis, with the direct identifiers replaced as described above. Their data policy prohibits using API inputs for model training.
• Stripe — handles payment processing securely.
• Vercel — hosts the application infrastructure.
• Resend — delivers our emails: reports, account notices and the match digest.

6. Your Rights (GDPR)

If you are located in the EU/EEA, you have the right to:

• Access your personal data
• Request deletion of your data
• Object to processing of your data
• Data portability

Most of these you can exercise yourself: your data lives in your account, and the dashboard lets you read, delete, or remove all of it without asking us. For anything else, contact us at the email below.

Right to deletion. If you have an account, you can delete an individual CV document, or your whole account, at any time from your dashboard — no need to email us. Account deletion is immediate and permanent: it removes your CV documents, analyses, rewrites, profile, and credits, and signs you out. Two things intentionally survive it: billing records, which we and Stripe must keep for tax and financial regulations, and an anonymised audit log of account events, which no longer identifies you once your account is gone.

7. Cookies

We do not use tracking cookies. Stripe may use essential cookies for payment processing, which is covered under legitimate interest.

8. Contact

For privacy-related questions: privacy@cvmentor.org