Privacy Policy

This Privacy Policy explains how AlignCV ("we", "us", or "our") collects, uses, stores, and protects your personal data when you use our website at https://getaligncv.com and our AI CV and cover letter building service (the "Service").

We are committed to protecting your privacy and processing your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) 2003.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

Under the UK GDPR, we process your personal data on the following lawful bases:

AlignCV uses AI technologies to generate CV and cover letter content based on the information you provide. When you use our AI features:

• Your input data (such as job descriptions, work history, and skills) is sent to our AI processing systems to generate personalised document content
• We may use third-party AI service providers (such as OpenAI or similar providers) to power our content generation features
• Your data is transmitted securely and processed in accordance with our data processing agreements with these providers
• We do not use your personal CV or cover letter content to train our AI models without your explicit consent

We ensure that any third-party AI providers we use comply with UK data protection standards through appropriate contractual safeguards.

We do not sell your personal data. We may share your data with the following categories of third parties:

• Payment processors: to process your subscription payments securely (e.g., Stripe)
• AI service providers: to power our AI content generation features
• Cloud hosting providers: to store and process data on secure infrastructure
• Analytics providers: to understand how our Service is used (in anonymised or aggregated form where possible)
• Legal and regulatory authorities: where required by law, regulation, or legal process
• Professional advisers: lawyers, auditors, and accountants where necessary

All third-party service providers are bound by data processing agreements that require them to protect your data in accordance with UK GDPR.

Some of our third-party service providers may be located outside the United Kingdom. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including:

• UK Adequacy Regulations: transfers to countries deemed adequate by the UK Secretary of State
• International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses
• Other appropriate safeguards as recognised under UK GDPR Article 46

You may request further details about the safeguards in place by contacting us at privacy@getaligncv.com.

We retain your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy:

• Account data: retained for the duration of your account and for up to 12 months after account deletion
• CV and cover letter content: retained while your account is active; deleted within 30 days of account deletion unless you request earlier deletion
• Payment records: retained for up to 7 years to comply with HMRC tax and accounting obligations
• Usage and analytics data: retained in anonymised form for up to 24 months
• Marketing consent records: retained for as long as the consent is valid and for 12 months thereafter

When data is no longer required, it is securely deleted or anonymised.

As a data subject, you have the following rights under UK GDPR:

• Right of access (Article 15): request a copy of the personal data we hold about you
• Right to rectification (Article 16): request correction of inaccurate or incomplete personal data
• Right to erasure (Article 17): request deletion of your personal data ("right to be forgotten")
• Right to restrict processing (Article 18): request that we limit how we use your data
• Right to data portability (Article 20): receive your data in a structured, commonly used, machine-readable format
• Right to object (Article 21): object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Rights related to automated decision-making (Article 22): you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Website: https://ico.org.uk

Telephone: 0303 123 1113

We use cookies and similar tracking technologies to enhance your experience on the Service. In accordance with PECR 2003, we obtain your consent before placing non-essential cookies on your device.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Regular security assessments and vulnerability testing
• Access controls limiting data access to authorised personnel only
• Secure infrastructure hosted with reputable cloud service providers

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:

AlignCV – Data Protection

Website: https://getaligncv.com

For complaints or concerns about data protection, you may also contact the Information Commissioner's Office (ICO) at https://ico.org.uk.