Privacy policy

CV-AI is an AI-powered CV analysis service operated by CakeStack. The service is available at CV-AI.UK.

This policy explains what personal data we collect, how we use it, and the choices you have. For the rules governing use of the service, see our Terms of service.

CV and job details: When you run an analysis, you upload a CV PDF and provide a job title and job description (and optionally a target company name). Your CV is sent to the Anthropic Claude API for analysis. We store your uploaded PDF in private cloud storage and save the structured analysis results — including scores, feedback, and any names or details extracted from your CV — in our database so you can view them on your dashboard.

Account information: If you create an account, we store your email address and, where you provide it, your name. Passwords are handled by our authentication provider and are never stored by us in plain text. If you sign in with Google, we receive the profile information Google shares with us (typically your name and email).

Subscription and usage data: We record your subscription status, plan, billing period, and how many CV reviews you have used in the current period. Payments are processed by Stripe. We do not receive or store your full card number.

We use your data to:

• Provide CV analysis and display your results and history
• Manage your account, authentication, and subscription
• Process payments through Stripe
• Maintain, secure, and improve the service
• Diagnose technical issues and respond to support requests

We do not sell your personal data. We do not use your CV content to train AI models. We do not send marketing emails at present. If we introduce marketing communications in future, we will update this policy and give you a clear way to opt in before doing so.

Your analysis history, uploaded CVs, and account data are kept for as long as your account remains active and you continue to use the service.

If you ask us to delete your account, we will remove your personal data and associated analyses within 30 days, except where we must retain limited records for legal, accounting, or fraud-prevention purposes.

If you have an account, you can:

• View your analysis history from the dashboard
• Request a copy of the personal data we hold about you
• Request correction or deletion of your account and associated data

To exercise any of these rights, email [email protected]. We will respond within 30 days.

If you are in the UK or EEA, you also have rights under applicable data protection law — including the right to object to certain processing and to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).

We use essential cookies to keep you signed in and to operate the service securely. We do not use advertising cookies or third-party analytics trackers.

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and industry-standard practices for authentication and storage.

No online service can guarantee absolute security. If you believe your account has been compromised, contact us promptly at [email protected].

CV-AI is not intended for anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify registered users by email.

For questions about our policy: [email protected]