Privacy Policy

1. Introduction

SimpleCVBuilder ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume building service.

By using SimpleCVBuilder, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Resume Data: Personal information, work experience, education, skills, and other content you add to your resumes
• Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)
• Profile Information: Optional profile settings and preferences
• Jobs you track: Job adverts you paste, or ask us to fetch from a link, to tailor your CV, plus the jobs you save and their status, notes, follow-up dates and interview dates. When you give us a link, we fetch that one page once, for you, to read the advert.
• Interview prep: If you prepare for an interview, we keep the questions, answers and notes we made for that job, and anything you fill in, so you can come back to them. We make them from your CV and the job advert. An advert you paste only for the prep is used once and not kept. Your name and contact details are not sent to our AI provider.

2.2 Information Collected Automatically

• Usage Data: Pages viewed, features used, time spent on the platform
• Device Information: Browser type, operating system, IP address
• Cookies: Session management, analytics and, for anyone not on a paid plan, advertising (see Cookie Policy and section 6 below)
• Upgrade interactions: When you click an upgrade CTA or start a checkout, we record the surface, the plan you were considering, and (on failure) the Stripe error code — never card data, never the error message verbatim. This data joins to your account so we can send you a one-time reminder if you tried to upgrade but didn't complete checkout. You can unsubscribe from these reminders from any reminder email or via account settings.

3. How We Use Your Information

• Provide and maintain our resume building service
• Process your subscription payments
• Improve and personalize your experience
• Send important service updates and notifications
• Send you tips and offers by email, if you said yes when you signed up or later in account settings. The legal basis is your consent. You can withdraw it at any time with the unsubscribe link in any of these emails, which works without signing in, or in account settings, and we stop straight away. If an email to you bounces or is marked as spam, we stop sending these emails to that address.
• Send you a follow-up reminder for a job, if you chose a follow-up date for it, and a reminder the day before an interview, if you added the interview date. This is a service message sent only because you asked for it, and it never includes offers. It is not affected by your choice about tips and offers. You can stop these reminders from the link in any reminder email or in account settings.
• Provide customer support
• Detect and prevent fraud or abuse
• Comply with legal obligations

We will NEVER: Sell your personal data, use your resume content for advertising, or share your information with third parties for marketing purposes.

Referrals

If you share your referral link, or sign up with a friend's, we keep a record of who referred whom (by account, not by name), the referral's status, and any reward we applied (the days of Pro and when). To stop the same person claiming twice and to spot abuse, we also keep, for anyone who signs up with a link, a keyed hash of their email address, which is a code made from it that cannot be turned back into the address. For everyone taking part we keep a keyed hash of the network, which is the first part of your internet address, not your device. We use this only to check that a referral is genuine and to apply the reward. The legal basis is our legitimate interest in running the programme fairly, and our contract with you for the reward itself.

We delete a network hash 90 days after we last recorded it. We keep the email hash after you delete your account, so the same address cannot be referred twice. The referral record stays too, with its status and that hash, but it is no longer linked to your account. We never send anything to your friends, and we do not collect or store their contact details. You share your link yourself.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption:

• Passwords are encrypted using bcrypt hashing
• Data transmission is encrypted using TLS/SSL
• Database hosted on secure Supabase infrastructure with row-level security
• Regular security audits and updates

5. Third-Party Services

We use the following trusted third-party services:

• Supabase: Database and authentication (privacy policy: supabase.com/privacy)
• Stripe: Payment processing (privacy policy: stripe.com/privacy)
• OpenAI: AI-powered features (privacy policy: openai.com/privacy)
• Vercel: Hosting and infrastructure (privacy policy: vercel.com/legal/privacy-policy)
• Resend: Sending account and marketing emails (privacy policy: resend.com/legal/privacy-policy)
• Google AdSense: Display advertising for anyone not on a paid plan, in the app and on our longer public articles (privacy policy: policies.google.com/privacy; see section 6 below)

These services have their own privacy policies and security measures.

6. Advertising on the Free Plan

SimpleCVBuilder shows display advertising, served by Google AdSense, in two places. If you use the free plan, you will see ads in the dashboard and the resume editor. If you are not on a paid plan, including if you are not signed in, you may also see ads on our longer public articles: the CV example pages, the CV template pages for each industry, the CV writing guides, blog posts, the ATS guide and the resume tips page. Each ad is labelled "Advertisement". Other public pages, such as the home page, pricing and this policy, carry no ads. Pro subscribers, users on a Pro trial and holders of a 30-Day Job Search Pass do not see ads anywhere, and the advertising script is not loaded for them.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies, including the DoubleClick cookie, enables it and its partners to serve ads to you based on your visits to SimpleCVBuilder and to other sites on the internet.

Ads are selected using cookies and the general context of the page, not your resume. Your resume content is never sent to Google and is never used to target advertising. This is consistent with our commitment in section 3.

If you are in the European Economic Area, the United Kingdom or Switzerland, Google's consent message asks for your choice first, and no ad is requested until you have made it. If you decline, you will still see ads, but they will be non-personalised: they are chosen from the page context rather than your browsing history. Non-personalised ads may still use a cookie for purposes such as limiting how often you see the same ad. You can change your choice at any time through the "Cookie choices" link in the footer of every page.

You can opt out of personalised advertising in the following ways:

• Google Ads Settings: adssettings.google.com to opt out of personalised advertising by Google
• Digital Advertising Alliance: aboutads.info/choices to opt out of personalised advertising by participating third-party vendors
• Your cookie choices on this site:decline advertising cookies when prompted, or change your choice later through the "Cookie choices" link in the footer

For more on how Google uses information from sites that show its ads, see policies.google.com/technologies/partner-sites.

7. Your Rights (GDPR Compliance)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to Access: Request a copy of your personal data, or download it yourself from your account settings
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your account and all associated data
• Right to Portability: Download your account data as a JSON file from your account settings, and your CVs as PDF
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Opt-out of certain data processing activities

To exercise these rights, visit your account settings or contact us at [email protected]

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy. Account data is deleted within 30 days of account deletion requests. Billing records are retained for 7 years for tax and legal compliance.

If you use the free ATS checker without an account, we never store the file you upload. We keep the text read from it, and the report, for 24 hours, then delete both within the following hour. If you create an account from the report, the CV is copied into your account and the anonymous report is still deleted on the same schedule.

A job advert you paste or ask us to fetch is kept with the CV you tailored for it. We delete the advert 180 days after you last worked on that tailored CV. The match scores stay.

Referral records are kept as described under Referrals: the network hash for 90 days, and the keyed email hash after your account is deleted.

9. Children's Privacy

SimpleCVBuilder is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our website. Continued use of SimpleCVBuilder after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: