Privacy notice.

About this notice

MyCVCheck is an individually operated CV assessment service. This notice explains how we use your information when you visit the website, submit a CV, buy a report or use an account. For privacy enquiries, contact the MyCVCheck team at hello@mycvcheck.co.uk.

Information we use

We process the CV you submit, its extracted text and the assessments, recommendations and documents produced from it. If you request job-specific advice, this also includes the job description, target role and any additional information you provide.

For purchases, we use the verified checkout email, payment reference and order details to deliver your purchase and help you recover access. Stripe handles card details; we do not store your full card number or security code. Account information includes your email and authentication records. We also use limited technical information to protect the service, prevent abuse and investigate errors.

Please leave out information that is unnecessary for CV advice, particularly health information, religious beliefs or other sensitive personal details. Do not include another person’s private information without an appropriate reason.

Why we use it

We use your CV and order information to provide the service you request, process purchases, deliver documents and provide support. Our lawful basis is performing our contract with you, or taking steps at your request before a contract.

We use limited security and technical records for our legitimate interests in keeping the service secure, preventing fraud and resolving problems. We retain necessary accounting information to meet legal obligations. Optional analytics and any marketing use require your consent. Providing an email for a report does not sign you up for marketing.

AI-assisted advice

OpenAI processes CV text and, where supplied, your target-job information to generate advice. The results are guidance for you: MyCVCheck does not make recruitment or employment decisions about you. AI can make mistakes, so check the advice and any rewritten wording before using it.

Our application does not request storage of AI responses at OpenAI. OpenAI may still retain security and abuse-monitoring information, normally for up to 30 days, with exceptions such as legal or security requirements. This is not a promise of zero retention. See OpenAI’s data controls for details.

Who helps provide the service

We use OpenAI for AI processing, Supabase for secure data storage and accounts, Vercel for website hosting, Stripe for payments and Resend for transactional emails. These providers receive the information needed for their part of the service. Report and recovery emails are sent to the relevant verified address. We do not sell your CV information.

Some providers process information outside the UK, including in the United States. Their published data-processing terms describe international-transfer safeguards, including standard contractual clauses with the UK Addendum where applicable. You can read the terms for OpenAI, Supabase, Vercel, Resend and Stripe, or contact us about a particular transfer. Stripe also processes some information for its own legal and fraud-prevention responsibilities.

How long information is kept

For new submissions, free-assessment CV content and results are scheduled for deletion after 30 days. One-off report and rewrite content is scheduled for deletion 90 days after we successfully send the completed purchase. When Plus is available, its CVs and saved documents are retained while the subscription is active and for 90 days after it ends, unless another valid entitlement applies.

These rules apply to submissions received from 9:37am UK time on 14 October 2026. Earlier reports remain available while we review their transition; they have not been enrolled in automatic deletion. We schedule daily cleanup. Unresolved purchases, incomplete delivery, other valid entitlements and legal holds can delay deletion; failed cleanup is retried. A cancellation does not remove access during an already-paid subscription period.

Necessary accounting records are kept for at least five years after the 31 January filing deadline for the relevant tax year. Unresolved payments, disputes and legal obligations may require longer retention. Keeping a payment reference does not require keeping the CV itself. Account information is retained while the account remains open, subject to verified closure requests and any information we must retain. Short-lived account and recovery security records are normally cleared after one day, and new processing security records after 30 days. Hosting and provider logs follow their separate retention arrangements.

Emails and attachments already delivered to you, and copies you download, are outside our control. Our providers may retain separate security, legal or backup copies under their own applicable terms; removing information from MyCVCheck does not promise immediate erasure of every such copy.

Your rights

You can ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing or a portable copy where the relevant right applies. You can object to processing based on legitimate interests and withdraw consent for optional processing. Withdrawing consent does not affect earlier lawful processing.

Email hello@mycvcheck.co.uk with your request. We will verify ownership using the existing report-recovery or account process, asking only for information reasonably needed. Please do not send card details, passwords or a fresh copy of your CV by default. We aim to respond within one month; we will explain any lawful extension or information we must retain.

Deleting an account does not automatically cancel a subscription. We will explain billing and retention consequences before completing an account-closure request. You can complain to the Information Commissioner’s Office if you are concerned about our handling of your information.

Cookies

Essential cookies protect report and account access and remember your cookie choice. Optional Google Analytics is loaded only with your consent. You can change your choice in Cookie settings. Stripe may use its own cookies during checkout.

Changes to this notice

We will update this notice when our practices change and explain significant changes where appropriate. The date above shows when this version was last updated.