Privacy Policy

For a shorter explanation, read Privacy at ReworkCV. You can make a privacy request at any time by emailing support@reworkcv.com.

1. Scope

This policy applies to the ReworkCV website, third-party sign-in, CV upload and analysis, guided CV improvements, mock interviews, progress history, product telemetry, customer support, and credit checkout. It applies when ReworkCV determines why and how personal information is processed for these activities.

2. Information we process

• Account information: name, email address, profile image, stable authentication-provider reference, account creation and update times, credit balance, and information needed to secure the account.
• CV and application information: file name, type and size; extracted text; page and structure information; links; analysis findings; scores; feedback; target roles; job descriptions; improvement answers; generated revisions; and download history held in the browser.
• Interview information: setup choices, CV and job-description context, generated questions, answer transcripts, duration and word-count measurements, delivery observations, scores, follow-ups, and coaching reports. Raw answer audio is processed for transcription but is not saved in ReworkCV interview history.
• Purchase information: bundle, price, currency, credits issued, payment session and transaction references, purchase time, purchaser email, and the checkout acknowledgement recorded before payment. The payment provider, rather than ReworkCV, collects complete payment-card details.
• Technical and support information: browser and device details, essential session information, feature usage, timing, error details, security events, and anything you include in a support request.
• Minimised interview telemetry: events such as interview start, completion, fallback, follow-up count, pause, repeat practice, and report engagement. It uses a one-way account identifier and excludes CV text, job descriptions, questions, transcripts, answers, and audio.

Conversion measurement: account creation, checkout, confirmed payments, credit delivery, completed free demos and completed paid tasks are recorded with pseudonymous account identifiers. Optional browser events (route choices, reviews, demos, pricing, checkout exits and survey views) are collected only when you allow optional analytics in the app. You can change that preference in the app footer. Events contain no CV text, names, email addresses, interview content or payment-card details and are marked to expire after 90 days. Declining does not affect feature access.

Safe retries for AI activities: when you request AI analysis, improvement, interview preparation, transcription or coaching, we reserve any required credits before processing. We keep an encrypted copy of the resulting output for up to seven days of retry access, marked for automatic expiry, so a repeated request does not charge you twice. Original audio is not stored. Operation identifiers, input fingerprints, credit ledger records and limited activity allowances are retained to prevent duplicate charging and misuse. Included improvement and interview allowances expire after 30 days.

Complimentary AI sample: when you explicitly request a sample, the selected passage is sent to the configured AI provider. An encrypted copy of the passage and result is available for seven days and marked for expiry. We retain an account-level record that the allowance was used, and limited attempt and token counts, to prevent duplicate use and control costs. Some accounts may receive different sample availability during a controlled rollout; this does not change purchased credits.

Free interview demo: your answer is sent to our AI provider only after you confirm processing. This feature does not save the submitted answer. Coaching may refer to details in your answer and is encrypted and available for seven days. We retain the used allowance marker and limited attempt and token counts to prevent repeat use and control costs.

Optional purchase feedback: if you submit the non-purchase survey, we store your selected reason with a pseudonymous account identifier and timestamps for up to 90 days. No free text is collected. This voluntary feedback is separate from optional behavioural analytics and does not enrol you in marketing. A browser preference suppresses repeated survey prompts for 30 days.

Optional guidance emails: if you opt in from your profile, we use limited activity milestones (such as free feedback viewed, checkout started and credits used) to choose relevant reminders. This consent is separate from analytics. You can opt out in your profile or through an unsubscribe link. We retain consent, suppression and delivery markers while your account exists to respect your choice and avoid duplicate messages. We do not add tracking pixels.

Controlled feature trials: accounts may be assigned to a limited experiment involving free analysis, local keyword previews, introductory offers or satisfaction credits. We retain assignment and allowance/claim records to keep access consistent and prevent repeat redemptions. Prices and processing are explained before you continue. Keyword-preview text is processed in your browser.

3. How we receive information

• Directly from you when you upload, type, speak, purchase, or contact support.
• From the authentication provider when you use third-party sign-in.
• From the payment provider when checkout is created and payment events are confirmed.
• Automatically from your browser and use of the service where necessary for storage, security, reliability, credit management, and minimised product measurement.

4. Purposes and lawful bases

ReworkCV relies on different lawful bases for different activities:

• Contract: to create and secure your account; provide requested CV and interview features; maintain progress; manage credits; process purchases; and provide customer support connected with the service.
• Legitimate interests: to prevent fraud and abuse, keep the service secure, diagnose errors, maintain reliability, understand minimised feature usage, and improve the product. We limit this processing to what is reasonably necessary and balance it against users' rights and expectations.
• Legal obligation: to keep records or disclose information where tax, accounting, consumer-protection, law-enforcement, or other applicable law requires it.
• Consent: where consent is legally required for an optional storage, communication, or future marketing feature. ReworkCV does not currently use advertising trackers or send marketing based on this policy.

You may object to processing based on legitimate interests by contacting us. We will stop unless we have compelling legitimate grounds or need the information for legal claims.

5. Cookies and device storage

ReworkCV uses essential authentication cookies and browser storage to provide features you request. Current uses include:

• secure sign-in and session continuity;
• document text, results, preferences, and progress history;
• an encrypted, time-limited cache of the active file;
• a cached credit value used for display while the server remains authoritative; and
• short-lived error information used to explain and troubleshoot failures.

Essential storage may operate without consent where it is necessary to supply the requested service. Optional conversion analytics is off until you allow it. Your preference is saved to your account. ReworkCV does not use this measurement for advertising or cross-site tracking. You can remove local information using in-app controls or your browser's site-data settings, although doing so can remove local history or sign you out.

6. AI, audio, and automated assessment

When you request an AI-powered feature, ReworkCV sends the information needed for that request to its server and its contracted AI and speech-processing provider. Depending on the feature, this can include CV text, structure information, links, a job description, target-role information, interview questions, answer transcripts, and improvement instructions.

Voice answers are sent to the provider's transcription service. ReworkCV does not persist raw answer audio in interview history. It may retain the transcript and resulting coaching information with the interview session for up to 30 days. Under the provider's current API data terms, submitted content is not used to train general models unless the API account holder opts in; provider retention varies by service and account configuration.

CV scores, interview scores, feedback, and recommendations are automated advisory outputs. They can be incomplete or incorrect and must be reviewed by the user. ReworkCV does not make recruitment decisions, submit applications, or determine whether a person receives a job or another opportunity. It does not use these assessments to make decisions with legal or similarly significant effects about users.

7. Service providers and other sharing

Information is shared only as needed for the purposes described above, including with:

• Authentication and account provider: secure sign-in and account infrastructure;
• AI and speech-processing provider: requested generation, assessment, speech, and transcription;
• Payment provider: checkout, payment processing, fraud controls, and receipts;
• hosting, database, and email providers: application delivery, account and interview storage, operational communications, and customer support; and
• regulators, courts, law enforcement, advisers, or a successor to the service where the disclosure is lawful and reasonably necessary.

ReworkCV does not sell personal information or share it for third-party advertising. You may contact support@reworkcv.com for the current provider names or information about the provider handling a particular activity.

8. International transfers

Some providers may process information outside the United Kingdom. When a restricted transfer is made, ReworkCV uses an applicable lawful transfer mechanism made available by the provider, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to approved standard contractual clauses, together with supplementary safeguards where required. Contact us if you want more information about the safeguard used for a particular provider.

9. Retention

• Browser data: until it expires, is overwritten, you clear the document or site data, or an applicable in-app reset removes it.
• Encrypted active-file cache: for its configured limited lifetime and removed earlier when the active document is cleared or you sign out where supported.
• Interview sessions, transcripts, and reports: up to 30 days unless you delete an interview sooner.
• Minimised interview telemetry: marked to expire after 90 days.
• Account information: while the account is active and afterwards only as needed to complete a deletion request, protect the service, resolve disputes, or comply with law.
• Purchase and accounting records: for the period needed to reconcile credits, handle payment corrections, disputes, and any refunds required by law, prevent fraud, and meet tax, accounting, and legal record-keeping duties.
• Support and security records: for as long as reasonably necessary to resolve the request or incident, establish legal claims, and prevent repeated abuse.

Providers may keep limited records under their own legal duties and documented retention controls. Information is deleted or anonymised when it is no longer needed, subject to backup cycles and lawful retention requirements.

10. Your rights

Depending on the circumstances and lawful basis, you may have the right to:

• receive a copy of personal information ReworkCV holds about you;
• correct incomplete or inaccurate information;
• request deletion or restriction of processing;
• receive eligible information in a portable format;
• object to processing based on legitimate interests; and
• withdraw consent without affecting processing that was lawful before withdrawal.

You can clear local data, delete individual interviews, and sign out using product or browser controls. To exercise a formal right or request deletion of your account, email support@reworkcv.com. We may ask for proportionate information to confirm your identity. We normally respond within one month, subject to legal extensions and exceptions.

11. Security

ReworkCV uses access controls, authenticated account scoping, transport security, payment isolation through its payment provider, minimised telemetry, and encryption for the active browser file cache. No system is completely secure. Users should remove unnecessary personal information before uploading and protect access to their sign-in account and device.

12. Sensitive data and children

ReworkCV is not designed to collect health information, biometric identifiers, political or religious beliefs, trade-union membership, sexual-life information, criminal-offence data, or other highly sensitive material. CVs and interview answers should not include this information unless it is genuinely necessary and you are entitled to provide it. ReworkCV does not use sensitive information to make hiring or eligibility decisions.

The service is intended for people who can lawfully enter into the agreement described in the Terms. It is not directed to children under 16. If you believe a child has provided personal information without appropriate authorisation, contact us so it can be reviewed and removed where required.

13. Questions and complaints

Send privacy questions or complaints to support@reworkcv.com. We will try to resolve the concern directly. You may also complain to the UK Information Commissioner's Office using its complaint service.

14. Changes to this policy

ReworkCV may update this policy when product behaviour, vendors, retention, or legal requirements change. The revised version will show a new last-updated date. Material changes will be brought to account holders' attention through a reasonable in-product or email notice where appropriate.