1. Who we are
CVPilot ("CVPilot", "we", "us", or "our") operates the website at cvpilot.xyz and the related CV enhancement service (the "Service"). This policy applies to anyone who visits the site, creates an account, or uploads a CV.
For the purposes of applicable data protection law (including the UK GDPR and EU GDPR), CVPilot is the "data controller" for the personal information described below. If you have any questions, you can reach us at privacy@cvpilot.xyz.
2. The information we collect
Account information
When you sign up, we collect the details needed to create and secure your account — typically your email address and, if you sign in with Google, the basic profile information that Google shares (name and email). Authentication is handled by Google Firebase Authentication.
CV content and the personal data inside it
The core of the Service is your CV. When you upload a document or edit your CV, we process and store the information it contains. A CV often includes personal details such as your name, email address, phone number, location or address, links to your profiles, your work history, education, and skills.
You decide what to include. We only store the information you choose to upload or enter, and we use it solely to provide the Service — namely to parse, structure, enhance, display, and export your CV. We do not sell your personal information, and we do not use the contents of your CV for advertising.
Some people like to include a home address, full date of birth, or other personal identifiers on a CV. These are not required to use CVPilot. We recommend including only the contact details you are comfortable sharing with prospective employers — for many people that is an email address and, optionally, a city or region rather than a full street address. You remain in control of every field and can edit or remove anything at any time.
Technical information
Like most websites, our hosting and infrastructure providers automatically process limited technical data — such as your IP address, browser type, and timestamps — for security, abuse prevention, and to keep the Service running reliably.
3. How we use your information
- To create and authenticate your account.
- To parse your uploaded CV and generate an enhanced, structured version.
- To let you edit, save version history, tailor your CV to a job, and export it as a PDF or Word document.
- To publish your CV at a public link only when you choose to make it public.
- To keep the Service secure and to prevent fraud and abuse.
- To respond to your support requests.
4. AI processing
To enhance and tailor your CV, the relevant text from your CV is sent to a third-party AI provider that performs the parsing and generation on our behalf. This processing is limited to delivering the feature you requested. We choose providers that act as processors under contract and do not use your content to train their models for unrelated purposes. AI output can contain errors — see our Terms for more on accuracy.
5. Public CVs and sharing
Every CV is private by default. A CV only becomes viewable by others if you switch it to public from your dashboard. When a CV is public, anyone with the link — and potentially search engines — can see the information it contains, including any contact details or location you have added. Exports such as PDFs also include a QR code that links back to the public page.
Please only publish information you are happy to be publicly accessible. You can switch a CV back to private at any time, though copies that others have already downloaded or cached remain outside our control.
6. How and where we store your data
Your account data and CV content are stored using Google Firebase (Authentication, Cloud Firestore, and Cloud Storage). Uploaded source files are kept in private storage and are streamed through our authenticated API rather than served from a public URL. Data is encrypted in transit (HTTPS) and at rest by our infrastructure providers. Depending on the provider's configuration, data may be processed on servers located in different countries; where data leaves your region, we rely on the safeguards provided by those vendors.
7. How long we keep it
We keep your account and CV data for as long as your account is active. When you delete a CV or your account, we remove the associated CV document, the uploaded source file, and generated exports. Some limited technical logs may persist for a short period for security and legal reasons before being deleted in the ordinary course.
8. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information — most of which you can edit yourself.
- Delete your CV or your entire account.
- Export or obtain a copy of your CV data.
- Object to or restrict certain processing.
You can exercise most of these directly in the app. For anything else, email privacy@cvpilot.xyz and we will respond within a reasonable time.
9. Cookies
We use only the cookies and local storage necessary to keep you signed in and to operate the Service. We do not use third-party advertising or cross-site tracking cookies.
10. Children
CVPilot is not intended for anyone under 16, and we do not knowingly collect personal information from children.
11. Changes to this policy
We may update this policy as the Service evolves. When we do, we will revise the "Last updated" date above and, for material changes, take reasonable steps to let you know.
12. Contact
Questions about your privacy or this policy? Email privacy@cvpilot.xyz.