1. Who We Are
AJ-CV ("we", "us", "our") operates the AJ-CV web application at aj-cv.com. We are the data controller for personal data processed through this service. For privacy enquiries, contact: privacy@aj-cv.com.
2. Data We Collect
- Account data: Full name, email address, and role — provided at registration.
- CV content: CV text and job descriptions you upload or paste for processing.
- Generated outputs: Tailored CVs, cover letters, and interview Q&A produced by our AI.
- Transaction data: Coin purchases, usage logs, and Stripe payment references (we do not store full card details).
- Support communications: Messages sent via the in-app support ticket system.
- Usage data: Page views, feature interactions, and error logs for service improvement.
- Cookies: Session cookies for authentication and optional analytics cookies (see Section 6).
3. Legal Basis for Processing (GDPR)
- Contract performance: Processing your CV and delivering the service you requested.
- Legitimate interests: Security, fraud prevention, and improving our platform.
- Legal obligation: Retaining financial records as required by law.
- Consent: Analytics cookies (which you may withdraw at any time).
4. How We Use Your Data
- To provide, maintain, and improve the AJ-CV service.
- To process AI-powered CV tailoring, cover letter generation, and interview preparation.
- To manage your coin balance and process payments via Stripe.
- To respond to support requests.
- To send transactional emails (e.g. payment confirmations). We do not send unsolicited marketing emails.
5. Data Storage & Retention
Your data is stored securely on servers within the European Economic Area (EEA) via Base44 cloud infrastructure. We retain your personal data for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by applicable law (e.g. financial records, which are kept for 7 years).
6. Cookies
We use the following categories of cookies:
| Category | Purpose | Consent Required |
|---|
| Essential | Authentication session management | No |
| Functional | User preferences (e.g. UI settings) | No |
| Analytics | Aggregate usage statistics | Yes |
You can manage cookie preferences via the cookie banner or your browser settings.
7. Third-Party Services
- Stripe: Processes payments. Subject to Stripe's own privacy policy.
- Base44: Our hosting and backend infrastructure provider.
- AI providers: CV content may be processed by AI models for tailoring purposes. Data is not used to train third-party models.
We do not sell your personal data to third parties.
8. Your Rights (GDPR)
As a data subject under GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure ("Right to be Forgotten"): Request deletion of your personal data.
- Portability: Receive your data in a machine-readable format.
- Restriction: Request that we limit processing of your data.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: At any time for consent-based processing (e.g. analytics cookies).
To exercise any of these rights, email privacy@aj-cv.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (e.g. the ICO in the UK).
9. Data Security
We implement industry-standard security measures including encryption in transit (TLS), access controls, and regular security reviews. Despite these measures, no system is 100% secure. In the event of a data breach affecting your rights, we will notify you within 72 hours as required by GDPR.
10. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.