AdaptiveCV
Privacy notice
This notice explains how AdaptiveCV uses personal information for customers in any country and the choices available to you. Version 2026-10-04 · Last updated 4 October 2026.
Controller and contact
AdaptiveCV is the controller of information handled through AdaptiveCV. Correspondence address: Contact us for the registered correspondence address. Privacy enquiries and rights requests: privacy@adaptivecv.app.
Information we collect
We process account details, authentication records, legal acceptance and email consent records, onboarding answers, your profile and CV content, saved documents, generation history, subscription records, preferences, support messages, and feedback.
We also process limited device, request, security, delivery, error, and product-usage records. This includes the subscription page, plan, checkout, payment-status, and cancellation milestones needed to understand the customer journey. Product milestones do not intentionally contain CV text, job descriptions, payment card details, or prompts. Google provides basic identity information when you choose Google sign-in; we never receive your Google password.
Why we use it and our lawful bases
We use information to create and secure your account, provide requested CV and cover-letter services, manage subscriptions, and answer support requests because it is necessary to perform our contract with you.
We use proportionate security, reliability, fraud-prevention, and aggregated product-usage records for our legitimate interests in protecting and improving the service. We send optional marketing only with consent; you can withdraw it at any time without affecting previous lawful processing. We process information where required by law.
AI and automated processing
Your profile and job information may be sent to our configured AI provider solely to produce the content you request. AdaptiveCV assists you but does not make hiring decisions or decisions that have legal or similarly significant effects about you. Review generated output before using it.
Who receives information and international transfers
Approved cloud hosting, database, AI, authentication, payment, email, monitoring, and support providers receive only what is needed for their role under contractual controls. Where a restricted international transfer applies, we use an applicable adequacy decision, standard contractual clauses, the UK International Data Transfer Agreement, the UK Addendum, or another lawful transfer mechanism.
Retention
Your live account, profile, and saved document data remain until you delete the relevant history or account, subject to legal retention needs. PDFs are rendered on demand rather than stored permanently. Processing files are eligible for cleanup within 72 hours, application logs are normally retained for 30 days, and deleted data can remain in encrypted backups until those backups expire.
Email consent, withdrawal, and delivery records are kept while your account is active to honour your choices and demonstrate compliance. A one-way email hash may be retained after unsubscribe or account deletion on a suppression list so the address is not marketed to again. It cannot be used to recover the address.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability, or objection, and may withdraw consent. Settings provides profile editing, data export, history deletion, account deletion, and marketing controls. We may need to verify your identity before fulfilling a request.
You can complain to the UK Information Commissioner's Office at ico.org.uk. Depending on where you live, you may also complain to your local privacy or data-protection authority. We would appreciate the chance to address your concern first.
Cookies and security
We use essential session, anti-forgery, and preference storage needed to sign you in, secure requests, and remember your theme. We do not use third-party advertising cookies. We use encryption in transit, access controls, rate limits, monitoring, and managed cloud security controls, but no internet service can guarantee absolute security.
Marketing and changes
Marketing is optional and off by default. We record the consent wording, version, source, and time. Every marketing email includes an unsubscribe route, and Settings lets you change the same preference. Material notice changes will update the version and date and may be communicated in-product or by email.
