Privacy policy

AlignCV is operated by {{COMPANY_LEGAL_NAME}}, registered at {{REGISTERED_ADDRESS}}{{COMPANY_NUMBER_IF_ANY}}. We are the data controller for the personal data described here. You can reach us at {{CONTACT_EMAIL}}.

Account details. Your email address and name. If you sign in with Google we also receive your Google account identifier and profile picture URL. If you register with a password, we store a hash of it — never the password itself.

The CVs you upload. We store the original file and a structured version of its text. A CV is a detailed record of your employment history and may contain information you consider sensitive.

Job descriptions you paste and the results we generate from them: match scores, tailored CVs, and any cover letters or interview questions you ask for.

Usage records of AI generations — which operation ran, how long it took, how many tokens it used, and whether it succeeded.

To tailor a CV we send the relevant parts of it, along with the job description, to Anthropic, who provide the AI model. Anthropic processes this on our behalf. Their processing happens in the United States, which means your data is transferred outside the UK. {{TRANSFER_MECHANISM}}

If you supply your own Anthropic API key in settings, your generations use your key instead of ours. The key is encrypted at rest and is never displayed, logged, or returned to your browser after you save it.

We use Resend to send account emails — sign-up confirmation and password reset — so it receives your name and email address, never your CV. We also use {{HOSTING_PROVIDER}} for hosting, {{DATABASE_PROVIDER}} for data storage and {{FILE_STORAGE_PROVIDER}} for uploaded files. We do not sell your data, and we do not use your CV to train any AI model.

We process your account details and CVs to provide the service you asked for — this is necessary for the performance of our contract with you. {{ARTICLE_9_CONDITION}}

Your CVs, job descriptions and generated documents are kept until you delete them or close your account. Sessions expire after 30 days of inactivity. {{BACKUP_RETENTION_PERIOD}}

Under UK GDPR you can ask us for a copy of your data, correct it, have it deleted, object to how we use it, or receive it in a portable format. You can delete individual CVs, job descriptions and tailoring sessions, or your whole account and everything in it, yourself from within the app at any time — deletion removes your files from storage too, not just our records of them. A minimal record that an account existed and was deleted, with no personal details attached, is kept for security purposes. For anything else, email {{CONTACT_EMAIL}} and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.

We set one cookie, which stores your sign-in session. It is strictly necessary for the service to work and cannot be turned off while you are signed in. {{ANALYTICS_COOKIE_PARAGRAPH}}

Your light or dark theme choice is stored in your browser’s local storage, not sent to us.