Privacy policy
This document describes the CV Unfold service in its current product version.
What we process
We process the CV file and optional job description solely to produce the requested analysis. The selected target role and seniority are used for the analysis and, only after optional measurement consent, as closed statistical categories. Contact details are masked before the main model review where possible. We do not use CV content for advertising or analytics.
School contact form
We use the name, email address, school name and message you submit to respond to your enquiry. Resend delivers the message to the service owner's Gmail inbox. We do not store a separate copy in the application database or send the message content to analytics. When email delivery is not configured, the form prepares a draft for you to send from your own email application.
Report feedback
Ratings, accuracy answers and optional comments submitted below a report are saved in the application and emailed through Resend to the service owner's Gmail inbox for product support and improvement. The notification contains no CV attachment, report content or private access link. We do not send feedback content to analytics. The separate 90-day application copy described below does not control retention in the owner's email inbox.
Purposes and legal bases
Document processing and role recognition are necessary to provide the requested service. We rely on our legitimate interest in measuring product and acquisition fit only for the brief processing needed to create the anonymous audience counters described below. The inferred category is not sent to Google.
Storage and retention
Individual source documents are processed in server memory and are not saved in product storage. School batches analysed in the background use private temporary file storage: sources are deleted after processing, with scheduled cleanup after at most 24 hours. When you choose a file, and before you start the analysis, we read it once in memory to detect the target role and preselect the review criteria; that step stores nothing and produces only a role category. The generated report, raw voluntary feedback and minimal operational metadata are stored in a private database for up to 30 days, unless you delete them earlier. If you add a written comment, we keep a separate product-feedback copy for up to 90 days so it can be reviewed after the report expires. That copy has no report or issue identifier and we do not add CV or report content to it. Failed school uploads are also covered by temporary-file cleanup.
Anonymous product statistics
After an analysis, the role perceived by the model is mapped once to one of a closed set of categories: supported IT, other IT, unclear, or one of about a dozen specific non-IT categories (for example construction, healthcare, legal or education) — never free text. We retain only cumulative counters by that category and a broad acquisition source (Google Ads or other). The counters contain no analysis identifier, exact role, date, CV or report content, IP address, click identifier or UTM value and cannot be used to restore a deleted report. The raw perceived role remains part of the report and is deleted with it. Voluntary report ratings are retained as separate cumulative quality counters without comments or analysis links.
Processors
OpenAI processes text for the AI review, Supabase stores the private report and operational records, Stripe handles payment, and Vercel hosts the application. Google measurement tools run only after optional consent and never receive CV, job-description or report content.
LinkedIn ad measurement
After optional consent, we retain the LinkedIn ad click identifier in your browser for up to 30 days. When you open a purchased report, our server verifies the payment and sends LinkedIn Ireland Unlimited Company the click identifier, payment time, amount, currency and a pseudonymous event identifier to avoid counting the same purchase twice. We do not send email addresses, names, CV or report content, private report links or your IP address in this event. The integration does not load the LinkedIn tracking script on report pages. You can withdraw consent in Privacy settings on a public page; this removes the stored click identifier and stops future events from this browser. Events already received by LinkedIn are subject to its privacy policy. LinkedIn privacy policy.
Your controls
You can delete a report immediately from the report screen or use the deletion instructions. You may contact the service provider to exercise applicable data rights or object to future audience-fit aggregation. Once a counter has been irreversibly aggregated, it can no longer be linked back to or removed for a particular report.