Privacy Policy

UK CV Fix (“we”, “us”) runs ukcvfix.com and is the data controller for the personal data described here. You can reach us any time through our contact form.

• Account details: your email address and a securely hashed password, or your Google account ID if you sign in with Google.
• Your CV information: the CV file or text you upload, or the answers you type into our form (for example your name, contact details, work history, education and skills), the job you are applying for if you tell us, and the CV and cover letter we create and any edits you make.
• Payment information: payments are handled by Stripe. We never see or store your card number; we only keep a record of what you bought and the amount.
• Messages you send us: your name, email address and message when you use the contact form, and any rating or comment you leave about your CV.
• Usage information: pages visited, buttons clicked, device and browser type, approximate location from your IP address, and recordings of how the site is used (mouse movements, clicks and scrolling) so we can find and fix problems. Text you type into form fields is masked in these recordings, but they can include text shown on the page, such as your CV.

• To create, store and deliver your CV and cover letter, and to let you come back and edit or download them — necessary to perform our contract with you.
• To take payment and keep financial records — contract, and our legal obligations.
• To answer your messages and feedback — our legitimate interest in supporting customers and improving the service.
• To understand how the site is used and fix problems — our legitimate interest in running a reliable service.

We do not sell your data, and we do not use it for advertising.

We use a small number of trusted providers who process data on our behalf, only for the purposes above:

• Anthropic — the AI that rewrites your CV. Your CV information is sent to it to generate your documents.
• Stripe — card payments.
• Railway — hosting for the website and its database.
• PostHog — website analytics and session recordings.
• Resend — delivering contact-form and feedback messages to us by email.
• Google — only if you choose “Sign in with Google”.

Some of these providers are based in, or store data in, the United States. Where data leaves the UK, it is protected by the UK–US Data Bridge or by the standard data protection contract terms approved for UK transfers.

We keep your account and CVs for as long as your account is open, so you can return to edit and download them. You can ask us to delete your account and everything in it at any time. Payment records are kept for six years, as UK tax law requires. Contact messages are kept for as long as needed to deal with them.

We use a cookie to keep you logged in, which the site needs in order to work. Our analytics provider, PostHog, also uses cookies and similar browser storage to recognise returning visitors.

You have the right to:

• get a copy of the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• object to, or ask us to restrict, how we use it
• receive your data in a portable format

To use any of these rights, contact us through the contact form using the email address on your account. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk).

The site is served only over encrypted HTTPS connections, passwords are stored hashed rather than in plain text, and only your own account can open your CVs.

If we make significant changes, we will update the date at the top of this page.