Privacy Notice

1. Who we are

Seller and data controller: InspectMyCV (legal business name: InspectMyCV; trading name: InspectMyCV).

InspectMyCV is the data controller for personal data processed through the InspectMyCV website and service. This means we decide how and why your data is used and we are responsible for protecting it.

2. What we collect and why

• Account details (name, email address, login credentials or Google sign-in) — to create and secure your account. Legal basis: contract.
• CV and job description text you submit — processed to produce match scores, keywords, tailored CVs, cover letters and interview preparation. We do not keep your original CV. We save your results, score breakdowns, tailored documents and interview answers (which may quote short extracts from your CV) in your dashboard. Saved jobs can include the job description, application stage, deadline and follow-up date. Legal basis: contract.
• Plan and usage information (your plan, number of tailored CVs used) — to provide your plan and its limits. Legal basis: contract.
• Messages you send us (name, email, message) — to answer your enquiry. Legal basis: legitimate interests.
• Technical data (IP address, device and browser information, basic usage logs) — for security, fraud prevention and keeping the service working. Legal basis: legitimate interests.
• Service emails — to confirm sign-ups, tell you about changes to your plan, and send individual saved-job reminders you request. Legal basis: contract.

3. Who we share it with

• Service providers who host our app and database, send our emails, and run the AI models that analyse CVs — only as needed to provide the service.
• Stripe for subscription management, payments, tax handling, fraud prevention, transaction support and invoicing. Stripe collects payment details directly under its privacy notice; we do not store card numbers.
• Professional advisers such as lawyers and accountants, where needed.
• Authorities where we are required to by law.

We never sell your personal data.

4. International transfers

Some providers may process data outside the UK or EEA. Where they do, we rely on adequacy decisions or standard contractual clauses to protect your data.

5. How long we keep it

We keep account data while your account is open and delete it within 30 days of you closing it. Contact messages are kept for up to 12 months. Your original CV is not stored; saved results and tailored CVs are kept until you delete them or close your account. Data we must keep for legal or tax reasons is kept only as long as required, then deleted or anonymised.

6. Your rights

Under UK and EU data protection law you have the right to access, correct, delete, restrict or move your data, to object to processing, and to withdraw consent where we rely on it. We respond within one month. To use these rights, contact us. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

7. Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls, and limiting who can see your information.

8. Cookies

We use essential cookies and similar storage to keep you signed in, protect your account and take payments safely (our payment provider sets cookies for fraud prevention). These are always on because the site cannot work without them. Optional analytics and marketing cookies are only used if you allow them in the cookie pop-up; until you choose, none are used. You can change or withdraw your choice at any time using "Cookie settings" at the bottom of every page. We do not use advertising cookies without your consent.

9. Changes

We'll update this notice when our practices change and show the latest date at the top.