🔒 Legal

Privacy Policy

How we handle your data, in plain English.

Last updated: 11 June 2026

1. Who we are

BuiltCV ("we", "us") operates builtcv.co.uk, a CV optimisation and visa-eligibility guidance service for UK international graduates. For any privacy question or request, contact us via the contact page.

2. What we collect

Account data: email address and name, via Firebase Authentication (Google LLC), when you create an account.
Content you submit: CV text, job descriptions, and visa details you enter into our tools.
Locally stored data: preferences, saved results, application tracker entries and visa countdown dates are stored in your own browser (localStorage), not on our servers.
Technical data: standard server logs (IP address, browser type) collected by our hosting provider, Netlify, for security and operations.

3. How your CV text is processed

When you use AI features (CV analysis, cover letters, interview prep, skill gap), the text you submit is sent to third-party AI providers to generate your result. Depending on availability, this may include Groq, Google (Gemini), or AWS Bedrock (Anthropic Claude). We send only the text needed to produce your result, and we do not use your CV to build marketing profiles.

Note: some AI providers' free tiers (including Google Gemini) may use submitted inputs to improve their models under their own terms. Avoid including data you consider highly sensitive (e.g. passport numbers) in CV text — it isn't needed for analysis.

4. What we don't do

We do not sell your data.
We do not share your CV with employers, universities, or recruiters.
We do not store your payment card details — payments are handled by Stripe.

5. Legal basis and retention

We process your data to provide the service you request (performance of a contract) and to keep the service secure (legitimate interests). Account data is kept while your account is active. Content submitted to AI features is processed transiently to generate results. Data in your browser's localStorage remains until you clear it or use in-app reset options.

6. Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data, object to or restrict processing, and request portability. To exercise any right, contact us via the contact page. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

7. Third-party services

Service	Purpose
Netlify	Hosting and serverless functions
Firebase Authentication (Google)	Account sign-in
Groq / Google Gemini / AWS Bedrock	AI processing of submitted text
Adzuna / Reed	Live job search results
Stripe	Payment processing

8. Changes

We'll post any changes to this policy on this page and update the date above. Material changes will be highlighted on the site.

Questions about your data?

Privacy and data requests get priority handling — we respond within 2 working days.

✉️ Contact Us