Privacy Policy

Last updated: March 2026

1. Introduction

CV-BOT Ltd ("we", "our", or "us"), a company registered in the United Kingdom, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and cloud-based application at app.cv-bot.co.uk.

By using CV-BOT, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (stored securely using industry-standard hashing)
  • Company/organization name (optional)

2.2 Payment Information

When you make a purchase, payment information is collected and processed by our payment processor, Stripe. We do not store your full credit card details. We receive:

  • Transaction confirmation and order details
  • Billing address (if provided)
  • Last 4 digits of payment card (for your reference only)

2.3 Usage Data

We collect anonymous usage statistics to improve our Service:

  • Feature usage patterns
  • Application performance data
  • Error reports and crash logs

2.4 CV and Document Data

Important: When you use CV-BOT, your CV/resume data is uploaded to and processed on our secure servers located in the United Kingdom and European Union. Your data is encrypted in transit and at rest. We act as a data processor on your behalf. Your CV data is stored on our servers until you choose to delete it. You retain full control over your data at all times.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service delivery: To provide, maintain, and improve CV-BOT
  • Account management: To manage your account and license
  • Communication: To send you important updates about the Service, respond to inquiries, and provide customer support
  • Payment processing: To process transactions and send related information
  • Security: To detect, prevent, and address technical issues and security threats
  • Legal compliance: To comply with applicable laws and regulations

4. Cookies and Tracking Technologies

We use only essential cookies necessary for the website to function:

  • Authentication cookies: Required to keep you logged in securely
  • Session cookies: Essential for maintaining your session state

We do NOT use: Third-party tracking cookies, advertising cookies, analytics cookies (like Google Analytics), or any cross-site tracking technologies.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service providers: With third-party vendors who assist us in operating our Service (e.g., Stripe for payments, hosting providers)
  • Legal requirements: If required by law, court order, or governmental authority
  • Business transfers: In connection with a merger, acquisition, or sale of assets
  • With your consent: When you have given us explicit permission

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Encryption of data in transit (HTTPS/TLS) and at rest
  • Secure password hashing
  • Regular security assessments
  • Access controls and authentication
  • Data processing exclusively on UK/EU-based servers
  • Row-level security to isolate customer data

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements

CV and document data is stored on our servers until you choose to delete it. You can delete your data at any time through the application. When you request deletion of your account, we will delete or anonymize all your personal data, including any stored CVs, within 30 days, except where we are required to retain it for legal purposes.

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or UK, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Restriction: Request restriction of processing
  • Portability: Request transfer of your data to another service
  • Objection: Object to processing of your personal data

To exercise any of these rights, please contact us at support@cv-bot.co.uk

9. International Data Transfers

Your data is processed and stored exclusively on servers located in the United Kingdom and European Union. We do not transfer your CV or document data outside of the UK/EU. For other account information, where international transfers are necessary (e.g., payment processing), we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

10. Children's Privacy

CV-BOT is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local data protection authority.