Privacy Policy

1. Information we collect

We collect information when you choose to use a feature. This may include:

• Your name, email address and phone number.
• Your account, profile, saved jobs and application details.
• If you sign in with Google, Facebook, LinkedIn or Microsoft: the name and email address on that account, and the ID that service gives it. We never see that account's password, and we never post anything for you.
• CV files, CV details, scores and saved CV reports.
• The job-search filters and email address used for a job alert.
• Employer details, job adverts and information sent through our contact form.

The CV checker also puts a random session ID in your browser storage. It uses this to connect repeat checks and reduce duplicate records. Separate CV-checker measurements store counts, yes-or-no signals, role names and score bands. They do not store CV text, a file name or a user ID.

2. Your CV, and what we do with it

We keep your CV on our own server so we can check it and match you to jobs. We do this for guests as well as for people who are signed in.

Before any part of your CV goes to the AI, we remove your name, email, phone number and links. The AI never sees who you are. Section 3 explains exactly what we send.

We never sell your CV. We show it to an employer when you apply for their job. If we later start introducing candidates to employers for jobs they have not applied to, we will ask you first before we do that with yours.

With the file we keep a record of the file name, the email and phone number found in the CV, your score, the industry and the date of the check. Checking a CV does not by itself give us permission to send you marketing email. That only happens if you tick the job-alert box.

We do not delete CVs automatically. You can ask us to delete yours at any time through our contact page, and we will.

A CV you upload while signed in is kept with your account. You can delete that one yourself from the CV manager, and you can delete a saved report from your CV history.

3. What we send to AI

The CV checker uses an external AI service. We do not send that service your PDF or the full text extracted from it. We first build a smaller, structured profile.

That profile can include job titles, work and project highlights, skills, tools, education, certificates, qualifications, career dates, measurable results, CV findings and the role you selected. If you add a job description, it can also include structured job requirements.

Before an AI request, the code removes the name, email, phone, location and links it detected. It also checks for common contact, address and date-of-birth patterns. If an email address or Sri Lankan phone number remains, the AI request is stopped.

We also use an external AI service to structure job adverts for an administrator to review. In that tool, the full advert text is sent to the service. It can include the contact details written in the advert. Nothing from that tool is published without an administrator choosing to publish it.

If you are an employer and want a public advert removed, please contact us.

4. AI analysis cache

We cache generated analysis so the same work does not need another AI request. The cache stores the generated result, a one-way fingerprint, the selected role, model and version details, use counts and an expiry date. It does not store the PDF or raw CV text. The write path removes the candidate name before saving the result. Expired cache entries are deleted when the code next checks them.

5. Job alerts

A job alert stores your email address, saved search, frequency and delivery dates. It may be linked to your account if you later register with the same email address.

We send a confirmation email first. No job-alert digest is sent until you click the confirmation link. The link lasts seven days. Confirmation and unsubscribe codes are stored as hashes, not as readable codes.

Every alert email has a one-click unsubscribe link. Unsubscribing stops that alert and records the time. It does not delete the alert record. The current code has no automatic deletion period for active, unconfirmed or unsubscribed alerts. Email logs also keep the recipient address, subject and delivery status without an automatic deletion period.

6. Who receives information

• An external AI service receives the structured CV profile or job-advert text described above.
• Our configured SMTP email service receives the address and message content needed to deliver email. The production provider is selected outside the application code.
• An employer receives the information you submit when you apply for that employer's job.
• Cloudflare runs the security check on the CV checker, the sign-up forms for job seekers and employers, the free job posting form and the employer password reset. It receives your IP address and details about your browser, to tell people apart from automated scripts.

7. External job links

Some job adverts link to an employer's website or application form. That service has its own privacy rules. Read them before sending personal information.