Your data is your career.
Your CV is your life’s work, your contact details and your employment history in one file. This page says what happens to it — including the parts that are less comfortable to say.
Encrypted in transit and at rest
Everything you send and download travels over TLS. Stored files and database records sit behind the storage platform’s encryption at rest. Uploaded documents live in private object storage with no public or signed URLs — every download re-checks that the session asking for it owns the file.
Processed to do the work, and nothing else
Your CV and the adverts you paste are used to build your Career Profile, run a match and write a tailored CV. They are not used for advertising, not sold, and not shared with recruiters.
We do not train models on your CV
ATSYou trains nothing. Generating a tailored CV sends selected content to a model provider so it can do the writing — that is unavoidable in a product that writes — and the provider is a named processor under a data processing agreement rather than an anonymous endpoint.
Where a model is involved, and where it is not
Reading your uploaded CV is ordinary software, not AI. Matching your profile against a job advert involves no model either: it is a deterministic comparison, which is why it is free and why the same advert always gives the same report. Writing a tailored CV is the only step that sends anything to a model.
Nothing is generated that you have not confirmed
A tailored CV can only draw on claims you have reviewed and confirmed. Anything the model produces that does not resolve back to one of them is refused rather than delivered, and you are not charged for it.
You can take it all back
Export everything held about you as a file you can read, or erase your account. Erasure removes your profile, your uploads and your generated documents. What survives is the minimum the law requires us to keep — financial records, and an audit trail of administrative actions — attached to an anonymised account row rather than to you.
Kept in the UK and the EEA
The database, the uploaded files and the generated documents are stored in storage locked to the EU jurisdiction. Data minimisation is a design rule rather than an aspiration: there is nowhere in the CV model to put a photograph, a date of birth, an age, a gender or a national insurance number.
What we do not offer, said plainly
This is not end-to-end encryption, and we will never describe it as such. To read your CV, match it against an advert and rewrite it, the service has to process it in plain text on the server — and generating a tailored CV sends part of it to a model provider. Any product that claims to do this work while never being able to read your document is describing something that cannot exist.
What we can honestly say is the three things above: encrypted in transit using TLS, platform encryption at rest, and controlled plaintext processing while the work is being done.
Your account, your controls
- Download everything held about you, as a file you can open and read.
- Delete a generated CV, or your whole account, from your account settings.
- Edit your Career Profile at any time. Editing withdraws your confirmation until you confirm the new version, so nothing is generated from something you have not agreed to.
- Sign-in is rate limited, and administrative access needs a second factor.
A full privacy notice, naming every processor and every retention period, is being prepared and will be published before the product opens to customers.