Privacy notice

Last updated 2 August 2026

This notice covers the ImproveCV pre-launch page only: scoring a CV you upload, and the email address you give us to receive the full report. ImproveCV has not opened yet, so there are no accounts, no saved CVs and no payments. When we open, a full privacy policy for the product will replace this one, and we will publish it before anyone can sign up.

Who we are

ImproveCV is the controller for the personal data described here. For anything in this notice, including any of the rights listed below, write to privacy@improvecv.ai.

What happens to your CV

The order matters here, so it is worth being precise about it:

The file stays on your device. Your PDF is opened and read inside your own browser. The file itself is never uploaded to us.
The text is sent for scoring. The plain text pulled out of that file is sent to our server, and from there to our AI provider, which produces the score, the four category scores and the list of fixes.
If there is no text to pull out, we send pictures of the pages instead. A scan, a photo, or a CV exported with its letters saved as shapes contains no text your browser can read. Rather than turn it away, your browser makes an image of each page (up to four) and those images are sent to our server and on to our AI provider, which reads them the way a person would. Nothing else about the file is sent, the images are not stored by us or by them, and only the text they contain goes on to be scored. If your CV is an ordinary text PDF this never happens.
We do not store the text. Neither our server nor our database keeps the words of your CV at any point, and the same is true of any page images.
The result is held briefly, then dropped. The score and the list of fixes sit in our server's memory under a random one-time reference for up to one hour, so that they can be emailed to you if you ask for them. They are deleted the moment the report is sent, and otherwise when the hour is up. They are never written to disk.

If you never enter an email address, we store nothing about you. Your own browser does hold on to your score and the extracted text for as long as the tab is open, so that reading this page and going back does not wipe the score you just got. That stays on your device, and your browser discards it the moment you close the tab.

Sensitive details in a CV

A CV can carry things the law treats as special category data: health or disability, religion, trade union membership, ethnic origin, political views. We do not ask for any of it and we do not look for it, but we cannot stop it being in the document you upload. By uploading your CV you explicitly consent to it being processed for the one purpose of producing your score and your list of fixes. You can withdraw that consent by simply not uploading a CV, and there is nothing left for us to delete afterwards because the text is never stored.

What we store if you give us your email

Asking for the full report creates one record for your address. It holds:

Your email address: The address you typed, lowercased.
Consent: That you agreed to be emailed, and when.
Where it came from: That you signed up on the pre-launch page rather than elsewhere.
Unsubscribe token: A random string, so the link in every email works without a login.
Your discount code: The one-time 10% code we issue you.
Your scores: The overall score, the four category scores, how many fixes were found, when it was scored, and how many times you have scored a CV. Numbers only. None of the wording of your CV is kept with them.

We keep the numbers so we know what the pre-launch group's CVs actually looked like. They are not linked to anything else and are not shared.

What we use it for

Sending you the full report and your discount code.
Telling you when ImproveCV opens, and sending occasional hiring tips. That is the newsletter the signup form describes.
Understanding, in aggregate, how the pre-launch group's CVs scored.

We do not sell your data, we do not share it for anyone else's marketing, and we do not use it to build a profile of you.

Technical data

Our server sees your IP address on every request, as any web server does. We use it to limit how often the same visitor can score a CV or submit an address, because both cost us money and both are open to anyone without an account. Our logs record that a CV was scored, the score and the number of fixes. They do not record CV content or which address scored what.

Cookies and browser storage

This page sets no cookies. There is no analytics, no session replay, no advertising pixel and no tracking of any kind on it, which is why you were not asked to accept anything.

It does use your browser's session storage, for one thing only: keeping your score and your CV's text in the tab so that navigating to this notice and back does not throw away the result. Nothing in it identifies you to us, none of it is sent anywhere, and your browser deletes all of it when the tab closes.

Loading the page does fetch a typeface from Google Fonts and a PDF reader from Cloudflare's CDN, and those providers see your IP address as part of delivering those files, as they would on any site that uses them.

Who else processes your data

OpenAI: Scores the CV text, and reads the page images when a file has no text to pull out. Data sent through their API is not used to train their models, and is held briefly for abuse monitoring before deletion.
Google Firebase: Stores the email record described above, and hosts this site.
Resend: Delivers the report and any later email we send you.

Where your data goes

Our AI provider and our database are in the United States, so the CV text you submit for scoring, any page images sent in its place, and the email record if you create one, are transferred outside the European Economic Area. Those transfers rely on Standard Contractual Clauses or an equivalent safeguard in the provider's terms.

How long we keep things

Your CV text, and any page images sent in its place: not kept.
Your score and fixes: up to one hour in memory, or until the report is emailed, whichever comes first.
Your email record: until you unsubscribe or ask us to delete it. When you unsubscribe we stop mailing you and keep the address flagged, so that we can honour the request and not mail you again by accident. Ask us to erase it entirely and we will.

Your rights

Under the GDPR and equivalent laws you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, and ask for it in a portable form. Where we rely on your consent, you can withdraw it at any time, and doing so does not affect anything done before you withdrew it.

The fastest way to stop all email is the unsubscribe link at the bottom of any message we send. For anything else, write to privacy@improvecv.ai and we will respond within the time the law allows, normally one month. You also have the right to complain to your national data protection authority.

Children

This page is not intended for anyone under 16. If you believe a child has submitted a CV or an email address to us, write to privacy@improvecv.ai and we will remove it.

Changes

If what we do with your data changes before launch, we will update this page and its date. When ImproveCV opens, a full privacy policy covering accounts, saved CVs and payments will take the place of this notice.