What happens to your CV

• Stored encrypted at rest in our database. The stored text is never handed back to your browser as ciphertext.
• The working copy in your browser lives in session storage, so it is gone when you close the tab. That is deliberate rather than incidental: a CV should not outlive the session on a shared machine.
• Sent to Anthropic in the US, under EU Standard Contractual Clauses, only by the AI writing tools, and those are switched off at the moment. Nothing sends it anywhere today.
• Never sent anywhere to produce a match score. That happens in our own database or in your browser.
• Kept on your explicit consent, once. A CV can mention health, disability, religion or ethnicity without you meaning it to, so the first time you save one we ask you to tick a box agreeing to us holding the whole document. Nothing looks for those categories or acts on them, though the whole text does feed the match score. Deleting your last CV withdraws the agreement.
• Deleting a CV is a hard delete. No soft delete and no recovery window. There are three copies of a saved CV - the library record, a server-side copy that feeds match scoring, and the one in this browser tab - and deleting removes all three. If you delete the CV you had set as default and others remain, the newest of those becomes the default and the scoring copy is repointed at it.

If you stop using it

A CV you have not saved in 24 months is deleted automatically, after a warning email about a month beforehand. The clock runs from the last time you saved it, not from your last sign-in. Only the CV goes. Your account, saved jobs, searches and alerts are untouched.

You can take a readable copy of everything, CV text included, from exporting your data. The full legal detail is on Privacy and GDPR and data requests.