Privacy Policy

Last updated: 22 March 2026

1. Who we are

AI CV Builder (“we”, “us”, “our”) operates the website aicvbuilder.co.uk. We are the data controller responsible for your personal data. If you have any questions about this policy or your data, you can contact us at hello@aicvbuilder.co.uk.

2. What data we collect

The personal data we may collect depends on how you use our service:

  • CV data— the contents of the CV you upload (name, contact details, work history, education, skills, and any other information contained in your CV).
  • Job description text— the job advert you paste for CV tailoring.
  • Payment information— processed securely by Stripe. We do not store your full card details. Stripe may collect your email address, card number, and billing address.
  • Technical data— IP address, browser type and version, device type, operating system, and referral source. This is collected automatically when you visit our website.
  • Account data— if you create an account for higher-tier plans, we collect your email address and any profile information you choose to provide.

3. How we use your data

We process your personal data for the following purposes:

  • To provide our CV tailoring service— your CV content and the job description are sent to the Anthropic Claude API for AI processing. This is necessary to perform the contract you have with us (GDPR Article 6(1)(b)).
  • To process payments— payment data is handled by Stripe as our payment processor. This is necessary to perform the contract (GDPR Article 6(1)(b)).
  • To improve our service— we may use anonymised, aggregated technical data to understand how our service is used. This is based on our legitimate interest (GDPR Article 6(1)(f)).
  • To comply with legal obligations— we may retain certain data where required by law, such as financial transaction records (GDPR Article 6(1)(c)).

4. The £5 tier — no account, no storage

When you use our one-off £5 CV tailoring service, you do not need to create an account. Your CV data and job description are processed in memory only and are not stored after you download your tailored CV. Once the tailored CV has been generated and downloaded, the original CV content and job description are discarded from our systems. We do not retain copies.

5. AI processing

We use the Anthropic Claude API to process your CV and job description. When you submit your CV for tailoring, the text content is sent to Anthropic’s servers for AI processing. Anthropic acts as a data processor on our behalf. Anthropic’s API does not use your data to train their models. Please refer to Anthropic’s privacy policy for further details on their data handling practices.

6. Payment processing

All payments are processed securely by Stripe, which acts as an independent data controller for payment data. We do not have access to your full card details. Stripe is PCI DSS Level 1 certified, the highest level of payment security certification.

7. Cookies

We use the following types of cookies:

  • Strictly necessary cookies— required for the website to function (e.g., session management, payment processing). These do not require your consent.
  • Analytics cookies— we may use analytics tools to understand how visitors use our site. These are only set with your consent.

You can control cookies through your browser settings. Disabling strictly necessary cookies may affect the functionality of our service.

8. Data retention

  • £5 tier (no account)— CV data is not retained after download. Payment records are retained for 7 years as required by UK financial regulations.
  • Account holders— your profile data and saved CVs are retained for as long as your account is active. When you delete your account, all personal data is deleted immediately with no waiting period.
  • Technical logs— server logs containing IP addresses are automatically deleted after 30 days.

9. Your rights under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

  • Right of access— you can request a copy of the personal data we hold about you.
  • Right to rectification— you can ask us to correct inaccurate personal data.
  • Right to erasure— you can ask us to delete your personal data. For account holders, deletion is immediate.
  • Right to restrict processing— you can ask us to limit how we use your data.
  • Right to data portability— you can request your data in a structured, machine-readable format.
  • Right to object— you can object to processing based on legitimate interests.
  • Rights related to automated decision-making — our AI tailoring assists you in creating a CV but does not make decisions that produce legal or similarly significant effects on you.

To exercise any of these rights, contact us at hello@aicvbuilder.co.uk. We will respond within 30 days.

10. International data transfers

Your CV data may be transferred to Anthropic’s servers, which are located outside the United Kingdom. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the Information Commissioner’s Office (ICO), to protect your data in compliance with UK GDPR.

11. Data security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/HTTPS), secure payment processing via Stripe, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal data.

13. Children’s privacy

Our service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

14. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “last updated” date. For significant changes, we will notify account holders by email where possible.

15. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

We would appreciate the chance to address your concerns before you contact the ICO, so please reach out to us first at hello@aicvbuilder.co.uk.