1. Who We Are
CV Mojo is operated by Max Thorley as a sole trader registered in England. Our platform is accessible at www.cv-mojo.com. If you have any questions about this policy, please contact us at privacy@cv-mojo.com.
2. What Data We Collect
We collect the following personal data when you use CV Mojo:
Account information: Name, email address, and password (hashed). If you sign in with Google, we receive your Google profile name, email, and profile photo.
CV data: The content of CVs you upload or create, including work experience, education, skills, and any personal information contained within them.
Signatures: If you add a signature, we store it encrypted and only use it on your own documents, such as your cover letters and resignation letters. It is deleted with your account.
Notes: If you write quick notes in the app, we store them with the name and link of the page you wrote each one on. They are private to you: nobody else can see them. They are included if you download your data, and they are deleted with your account.
Charity and volunteering: If you add charity or volunteering entries, they are shown publicly only when you choose: on your portfolio, entry by entry (and as a Volunteer label on your community profile once one is shown). They are included if you download your data, and they are deleted with your account.
Free uses: To stop misuse of free uses we keep a scrambled (hashed) version of the network address used to sign up for 30 days, never the address itself.
Usage data: Pages visited, features used, reviews written, posts created, and timestamps of activity. If you accept analytics cookies, we also collect usage statistics through Google Analytics (see section 4).
Technical data: IP address, browser type, device type, and cookies (see our Cookie Policy).
3. How We Use Your Data
We use your data to provide and improve CV Mojo, including to display your CV for community review, generate AI-powered analysis and suggestions, send you email notifications (verification, review alerts, optional digests), calculate reputation scores and badges, and display anonymised statistics on the platform.
We do not sell your personal data to third parties. We do not use your CV data for advertising purposes.
4. Third-Party Services
Anthropic (Claude AI): CV content is sent to Anthropic's API for AI analysis features (Quick Scan, Fix my CV for me, Cover Letter, Interview Prep, ATS Check, Salary Insights, LinkedIn Optimiser, Bullet Rewriter). Anthropic processes this data under their privacy policy and does not use it to train models.
Google Cloud Text-to-Speech: Interview question text is sent to Google's TTS API for the Read Aloud feature. Google processes this under their Cloud terms.
Google OAuth: If you sign in with Google, authentication is handled by Google's OAuth service.
Brevo (email): Transactional emails are sent via Brevo's SMTP service.
Stripe: Payments are processed by Stripe. We never see or store your full card details.
Google Analytics: Only if you accept analytics cookies, we use Google Analytics 4 to see which pages help people. It records the pages you view, how you arrived, your device and browser, and your rough location, plus a few events such as starting a free CV check or creating an account. We never send your name, email address or CV content, and Google signals and ad personalisation are switched off. If you reject analytics cookies, or don't choose, Google Analytics doesn't load. You can change your mind at any time with the Cookie settings link in the site footer or on our Cookie Policy page, which has the details.
5. Data Retention
Your account data and CV content are retained for as long as your account is active. You can delete your account at any time by contacting us. Upon deletion, we will remove your personal data within 30 days, except where we are legally required to retain it.
Free CV check (no account): when you use the free CV check, we send your CV and the job you entered to Anthropic for the AI review, and we keep the CV text and the report for up to 7 days so you can save them to an account. If you create an account or log in and save the check, it becomes a CV in your account and the temporary copy is deleted straight away. If you don't, we delete the CV text and the report after 7 days. We keep the score, the job title and the date without your CV, and we log your IP address with each check to enforce the limit of 3 free checks a day.
Emailed CV check results: if you ask us to email your free CV check results, we store your email address with that check, the score, the job title you entered, the dates we sent the emails, and a scrambled (hashed) form of your IP address that we use only to stop the form being misused. We use your address to send that one results email and, only if you tick the box, one reminder about three days later. We never add it to a mailing list. Every email has a link to stop them, and if you use it we won't send that address any more CV check emails. We delete the address and these details 30 days after your check, whatever happens. The CV itself and the full report are still deleted after 7 days, as described above, and the emails only ever contain that check's results. The "Save it to a free account" link in the email only works for an account made with the same email address.
Portfolio contact messages: when you use the Get in touch form on someone's CV Mojo portfolio, we store your name, email address, company (if you give one) and message, with the date and a scrambled (hashed) form of your IP address that we use only to stop spam. We email your message to the portfolio owner and keep it in their CV Mojo inbox, where only they can read it. We never show you their email address; if they reply, they choose to share it with you. We delete each message after 12 months, or sooner if the owner deletes it or closes their account.
6. Your Rights (UK GDPR)
Under UK data protection law, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to processing of your data, request data portability, and withdraw consent at any time.
To exercise any of these rights, email privacy@cv-mojo.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Security
We take reasonable measures to protect your data, including password hashing (bcrypt), HTTPS encryption, CSRF protection, and rate limiting. However, no system is 100% secure, and we cannot guarantee absolute security.
8. Children
CV Mojo is not intended for users under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use of CV Mojo after changes constitutes acceptance of the updated policy.