CVCraft← Back to home

Privacy Policy

Last updated: 19 April 2026

1. Who we are

CVCraft ("we", "us", "our") operates the website cvcraft.co and provides free CV optimisation, cover letter, and interview preparation tools. For any privacy questions, contact us via our contact page.

2. What data we process

  • CV and job description text — submitted by you, sent to our AI provider for processing, and returned to you. We do not store this data on our servers after the session ends.
  • Analytics data — if you accept cookies, Google Analytics collects anonymised usage data (pages visited, device type, approximate location). IP addresses are anonymised.
  • Contact form submissions — if you contact us, we receive the name, email, and message you submit.

3. Legal basis (GDPR)

  • Consent — for optional analytics cookies.
  • Legitimate interest — for essential functionality (processing your CV when you submit it).
  • Contract — for responding to contact form submissions.

4. Data sharing

We share CV and job description text with our AI processing provider solely to generate your results. We do not sell, rent, or share your personal data with third parties for marketing purposes. Contact form data is stored by Netlify for delivery to us.

5. Data retention

CV and job description text is not retained after your session ends. Analytics data is retained for 14 months by Google Analytics. Contact form messages are retained for up to 12 months.

6. Your rights (GDPR & CCPA)

You have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority (e.g. ICO in the UK)
  • Opt out of the sale of personal information (CCPA) — we do not sell data

Exercise these rights via our contact page.

7. Cookies

See our cookie policy for details.

8. International transfers

Your data may be processed outside your country (e.g. in the EU or US). Where required, we rely on Standard Contractual Clauses to ensure adequate protection.

9. Children

CVCraft is not intended for users under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified via the website.