Your privacy, in plain English

TailorCV is designed to work with as little personal data as possible. When you use the service, we handle the following:

• CV text — the CV content you paste or upload. This is sent to OpenAI to generate your tailored CV and is never stored on our servers after the response is returned.
• Job description text — the job posting you provide (pasted or fetched from a URL). Treated identically to your CV: used in-memory for the AI request only.
• Anonymous browser ID — a random UUID generated in your browser (stored in localStorage). This is used solely to count how many CVs you have tailored, with no link to your identity.
• Usage count— an integer (e.g. “3 CVs tailored this month”) associated with your anonymous browser ID.
• Approximate timestamp— the month and year of your usage (e.g. “May 2026”), used to reset usage counters monthly.
• Payment data — if you pay for a tailored CV, the transaction is processed by Stripe. We receive confirmation that payment succeeded, but we never see or store your card details.

We are explicit about what we do not collect:

• No name or email — unless you voluntarily email us for support.
• No account required — there is no sign-up, login, or user account.
• No CV stored server-side — your CV and job description are processed in RAM only and discarded once the AI response is returned.
• No browsing history or tracking pixels — we do not use third-party ad trackers.
• No IP address logging — our API routes do not log incoming IP addresses or request bodies.

Your data is used for exactly one purpose: generating your tailored CV.

• Your CV and job description are sent to the OpenAI API to produce a tailored CV. This is the core function of the service.
• Your anonymous browser ID and usage count are used to enforce fair-use limits and are never shared with third parties.
• We use aggregate, anonymised analytics (page views, button clicks, error rates) to improve the product. No individual is identifiable from these analytics.
• We do not sell, rent, or share your data with third parties for marketing or any other commercial purpose, beyond what is described in the “OpenAI and third parties” section below.

CV and job description text — retained in server memory only for the duration of the API request (typically under 30 seconds). After the tailored CV is returned to your browser, this text is discarded. It is never written to a database, disk, or log.

Anonymous usage record— your browser ID, usage count, and month/year string are stored in our database to support usage limits. This record contains no PII. You can request deletion at any time (see “Your rights” below).

Payment records — Stripe retains payment records per their own retention policy. We receive a session confirmation ID but do not store card details.

Analytics events — aggregated and anonymised. Individual events are retained for up to 90 days.

Your CV text and job description are transmitted to OpenAIvia their standard Chat Completions API to generate your tailored CV. We do not use OpenAI's fine-tuning or training APIs.

Per OpenAI's default API policy, data submitted via the API is not used to train OpenAI models. You can read OpenAI's privacy policy at openai.com/policies/privacy-policy.

We use Stripefor payment processing. Stripe's privacy policy is at stripe.com/privacy.

No other third-party services receive your CV or job description content.

TailorCV does not use cookies.

We use localStorage (browser storage, not a cookie) to persist:

• Your anonymous browser ID (a UUID generated the first time you visit).
• Temporary form state (your CV and job description text) between the payment step and the result step. This is cleared once your tailored CV is delivered.

Because we use localStorage rather than cookies, no data from TailorCV is automatically sent to our servers on every page load, and this storage is not subject to cookie consent regulations under GDPR/ePrivacy. You can clear it at any time through your browser settings.

You have the right to request deletion of any data we hold about you. Because we store only an anonymous browser ID with no link to your real identity, we cannot identify you without you providing your browser ID.

To request deletion of your usage record:

1. Find your browser ID in your browser's developer tools under localStorage → key: tailorcv:browser-id.
2. Email privacy@tailorcv.app with your browser ID and subject “Data deletion request”.
3. Alternatively, use our data deletion API: POST /api/delete-data with body {"userId":"<your-browser-id>"}.

We will process all deletion requests within 30 days. Because we collect no name, email, or other identifier beyond the anonymous ID, there is nothing else to delete.

You also have the right to access the data we hold about you. Given that the only data is an anonymous usage count, an access request can be satisfied by sharing the count associated with your browser ID. Email us at privacy@tailorcv.app.

TailorCV is committed to compliance with the General Data Protection Regulation (EU GDPR) and the UK GDPR.

• Lawful basis — processing your CV and job description is necessary to perform the service you have requested (Article 6(1)(b) — contract performance). Processing of the anonymous usage counter is based on our legitimate interest in enforcing fair-use limits (Article 6(1)(f)).
• Data minimisation — we collect only what is strictly necessary for the service.
• Storage limitation — CV text is never stored. The anonymous usage record is retained only while your browser ID remains active.
• International transfers — your CV text is processed by OpenAI, a US-based service. OpenAI participates in the EU-US Data Privacy Framework and maintains appropriate safeguards for cross-border transfers.
• Rights — you have the rights of access, rectification, erasure, restriction, portability, and objection as set out in the GDPR. Contact privacy@tailorcv.app to exercise any of these rights.

TailorCV is not intended for use by anyone under the age of 13. We do not knowingly collect data from children. If you believe a child has used the service, please contact us at privacy@tailorcv.app and we will delete any associated data.

We may update this policy from time to time. If we make material changes, we will update the “Last updated” date at the top of this page. Continued use of TailorCV after a policy update constitutes acceptance of the revised policy.

For any privacy questions, data requests, or concerns, contact us at: