Privacy Policy
Last updated: 2 May 2026
1. Who we are
BetterCV ("we", "us", "our") provides AI-powered CV and LinkedIn analysis. This policy explains how we handle your personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR. For privacy questions contact privacy@bettercv.app.
2. Data we collect
- Account data: email address, authentication identifiers.
- CV & profile content: files you upload, LinkedIn URLs, generated rewrites and scores.
- Payment data: handled by Stripe; we store only customer/subscription IDs and status, never card numbers.
- Usage data: log events, device/browser info, IP address (for security and analytics).
3. How we use your data
- Provide the service (analysis, rewrites, account management).
- Process payments and manage subscriptions.
- Improve the product and prevent abuse.
- Send transactional emails (e.g. receipts, account notices).
Legal bases: contract (Art. 6(1)(b)), legitimate interest (Art. 6(1)(f)) and consent (Art. 6(1)(a)) for optional analytics.
4. AI processing
Your CV content is sent to AI model providers (e.g. Google, OpenAI) via secure APIs to generate scores and rewrites. We instruct providers not to train on your data. We do not sell your data.
5. Sub-processors
- Supabase (database, auth, storage) — EU region
- Cloudflare (hosting, CDN)
- Stripe (payments)
- Lovable AI Gateway (Google, OpenAI models)
6. Retention
Account and CV data are kept while your account is active and deleted within 30 days of account closure. Invoices are kept for 10 years for tax compliance.
7. Your rights
You can request access, rectification, deletion, restriction, portability, and withdraw consent at any time. Email privacy@bettercv.app. You may also lodge a complaint with your local data protection authority.
8. International transfers
Where data leaves the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.
9. Changes
We will notify material changes by email or in-app notice.