Skip to main content

Privacy Policy

Last updated: 2 March 2026

Introduction

Simple CV Builder ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CV building service.

Information We Collect

Personal Information

When you create an account with us, we collect information that you provide directly, including:

  • Name, email address, and phone number
  • Professional information (work experience, education, skills)
  • Profile photo (if you choose to upload one)
  • Biography and additional CV details
  • Job application information (job titles, companies, application dates, status, notes, uploaded documents)
  • Organisation membership information (if you are part of an organisation account)
  • AI service preferences and configuration (if you use AI features)
  • User-provided API keys for third-party AI services (encrypted and stored securely)
  • Custom CV templates and designs (if you use AI template generation)
  • CV variants and versions (multiple versions of your CV for different job applications)
  • Feedback submissions (when you submit feedback through our feedback widget, we collect your feedback message, the page URL where you submitted it, and technical information about your device and browser to help us understand and address your feedback)
  • Subscription and payment information (Stripe customer ID, subscription status, plan type, billing period end date) — when you subscribe to a paid plan, we store references to your Stripe account; payment details (card numbers, etc.) are processed directly by Stripe and we do not store them

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

  • Device information (browser type, device type, operating system)
  • Usage data (pages visited, time spent on site)
  • IP address and general location information
  • Referrer information
  • System capabilities (CPU cores, memory, GPU information) - only when you explicitly request a system check
  • Technical information when submitting feedback (screen resolution, viewport size, device pixel ratio, timezone, language, browser user agent, and referrer URL) - collected automatically to help us understand and reproduce issues you report

How We Use Your Information

We use the information we collect to:

  • Create and maintain your CV profile
  • Provide, operate, and improve our service
  • Generate PDF downloads of your CV
  • Share your CV via online links
  • Track and manage your job applications
  • Process CV data through AI services for rewriting, quality assessment, and template generation (when you choose to use these features)
  • Store and manage multiple CV variants for different job applications
  • Store uploaded documents (CVs, job descriptions) associated with job applications
  • Manage organisation accounts and member access (for organisation administrators)
  • Analyse usage patterns to improve our service
  • Send important service notifications
  • Respond to your inquiries and provide customer support
  • Provide system capability recommendations (only when you explicitly request this feature)
  • Process and respond to feedback submissions (we use the technical information collected with your feedback to understand and reproduce issues, improve our service, and respond to your concerns)
  • Process subscription payments and manage your plan (we use Stripe to process payments; your payment details are handled by Stripe in accordance with their privacy policy)

Payment Processing (Stripe)

When you subscribe to a paid plan, payments are processed by Stripe. We do not store your full card number or payment details. Stripe collects and processes payment information in accordance with their privacy policy. We store only the Stripe customer ID, subscription status, and billing period information necessary to provide your subscription and manage your account.

For more information about how Stripe handles your data, please see Stripe's Privacy Policy.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

We use cookies for:

  • Essential Cookies: Required for authentication and security
  • Analytics Cookies: Help us understand how visitors interact with our website
  • Functional Cookies: Remember your preferences and settings

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

AI Services and Third-Party Processing

Our service offers AI-powered features for CV rewriting, quality assessment, and custom template generation. When you choose to use these features, your CV data may be processed by third-party AI services:

  • Local AI (Ollama): If you configure local AI on your device, your CV data is processed entirely on your computer and never sent to external servers. We do not have access to this data during processing.
  • Browser-Based AI: If you use browser-based AI, models run entirely in your browser. Your CV data is processed locally and never sent to external servers. Models are cached in your browser's storage.
  • Cloud AI Services (User API Keys): If you provide your own API keys for cloud-based AI services (OpenAI, Anthropic, Google Gemini, xAI Grok, Hugging Face), your CV data will be sent to these third-party providers for processing. Your API keys are encrypted and stored securely. We do not have access to your API keys in plain text. These services have their own privacy policies and data handling practices.
  • Site Default AI: If you use the site's default AI service, your CV data may be processed by our configured AI provider. This is subject to the provider's privacy policy.
  • AI-Generated Content: Content generated by AI services (including CV variants, templates, and assessments) is stored in your account and treated the same as manually created content under this Privacy Policy.

API Key Security: When you provide API keys for third-party AI services, we encrypt them using industry-standard encryption before storing them in our database. We cannot access your API keys in plain text. You are responsible for managing your API key usage and costs with the respective providers.

We recommend reviewing the privacy policies of any third-party AI services you choose to use. You can opt to use local AI or browser-based AI exclusively to keep all processing on your device.

Organisation Accounts and Data Sharing

If you are part of an organisation account:

  • Organisation administrators may have access to view member CVs and job application data within the organisation
  • Your account information (name, email, role) is visible to organisation administrators
  • Organisation administrators can manage member access and permissions
  • You may be removed from an organisation by an administrator, which will revoke your access to organisation-specific features

If you are an organisation administrator, you are responsible for ensuring that member data is handled in accordance with applicable privacy laws and this Privacy Policy.

Data Storage and Security

Your data is stored securely in MySQL database. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

Encryption: Sensitive data, including API keys you provide, is encrypted using industry-standard encryption (AES-256-GCM) before storage. We cannot access your encrypted API keys in plain text.

File Storage: Uploaded documents (such as job application files) are stored securely and are only accessible to you (and organisation administrators if you are part of an organisation account).

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure.

Your Rights

Under applicable data protection laws, you have the right to:

  • Access: Request copies of your personal data
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data
  • Restriction: Request restriction of processing of your personal data
  • Data Portability: Request transfer of your data to another service
  • Objection: Object to processing of your personal data

To exercise these rights, please contact us using the information provided in the Contact section below.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

Children's Privacy

Our service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: Contact Us

By using this service, you acknowledge that you have read and understood this Privacy Policy.

Back to Home