Privacy

Plain-English version. The legal document will land before paid tiers do; for the beta, this is the working policy.

Last updated: May 2026 (beta).

This is a beta-era policy. The product is brand new and the policy will be tightened as we add paid tiers, integrations, and the formal legal document. By using the beta you agree to the practices described below. If you don't, please don't sign up, or delete your account at any time by emailing the contact below.

What we collect

Account basics: email and display name from your sign-in provider (Microsoft, eventually Google / LinkedIn).
Your CV content: the CV(s) you upload, work history you enter, STAR examples you save, skills you tick.
Application activity: jobs you save, applications you track, cover letters and CVs you generate.
Usage telemetry: daily counts of which features you use (for fair-use caps) and basic error logs.
Feedback: anything you send via the in-app feedback button.

What we don't collect

Payment details (no paid tier yet).
Browsing behaviour outside CVBetter (no third-party trackers, no advertising pixels).
Anything you don't put in yourself.

How your data is used

Primary use: making the product work for you, storing your profile so you don't have to re-type it, grounding the AI so it doesn't invent details, tracking your applications so you can see what you've sent.

Secondary use: research into what makes job applications work. We may analyse aggregated and anonymised data (for example, which CV patterns correlate with interview success) to improve the product and to share insights with employers, careers services, researchers, or other interested parties who can act on them.

Aggregated insights mean group-level patterns, never your personal CV or identity. Where we work with third parties on research, we share patterns, not people.

The AI providers

CVBetter sends your CV text, job descriptions, and prompts to a large-language-model API to generate the tailored CV, cover letter and feedback. The current provider is Google (Gemini). The provider processes your prompt to produce a response and, per their policies, may use it for service operation but not for training when accessed via the paid API tier we use. The provider receives the text of what you're tailoring, not your account identity.

Where the data lives

Hosted on Microsoft Azure (West Europe). Profile data sits in encrypted Azure storage; uploaded files in Azure Blob Storage. Authentication via Microsoft Entra External ID.

Your controls

Edit any field in your profile at any time.
Reset your profile (Settings → Danger zone). This wipes work history, skills and STAR examples. Your account stays.
Delete your account: email the contact below and we'll remove your data within 30 days.
Export: ask and we'll send you a copy of what we have on you (JSON).

Contact

Questions, deletion requests, or anything else: [email protected].

A formal data-protection notice (UK GDPR controller, lawful basis, retention windows, ICO registration) will replace this page before paid tiers launch.