Privacy Policy

What we collect

When you use UpwardCV, you provide a CV (as pasted text or an uploaded PDF, DOCX, or TXT file), a job description, and a target role. If you upgrade to the full review, you may also answer follow-up questions about your experience. If you pay, Stripe collects and processes your payment details directly, we never see or store your card information ourselves.

How it's used

Your CV, job description, and any follow-up answers are used only to generate the review, rewritten CV, cover letter, and interview questions you request. That content is sent to Anthropic's Claude API to generate your review. Your CV content is never sold. By default, Anthropic does not use API inputs or outputs to train its models, that only happens if an account has explicitly opted into a program that allows it, which we do not do. Anthropic processes and retains the data sent to its API according to its own applicable commercial and API policies, we don't control that retention window and don't promise immediate deletion on Anthropic's side, if you want details on Anthropic's own data handling, see Anthropic's privacy documentation directly.

What's stored, and where

UpwardCV does not intentionally, permanently store your CV or job description in a database. In the course of generating your review, that content may exist temporarily in server memory or a short-lived cache, this is what lets the paid upgrade continue from your free result without asking you to re-paste your CV, and it's discarded automatically rather than kept. Separately, your browser's own sessionStorage temporarily holds your CV, job description, and free result on your device, specifically so that navigating to Stripe Checkout and back doesn't lose your review. That's storage in your browser, not on our servers, and it clears when you close the tab or start a new review.

Payments

Payments are processed by Stripe. Stripe receives whatever payment and billing information it needs to process your purchase, according to Stripe's own privacy practices. We receive confirmation that a payment succeeded, not your card details.

Third parties

CV, job description, and follow-up answer text is sent to Anthropic (the provider of the Claude API) to generate your review. Payment details are handled by Stripe. Our hosting provider (Vercel) and its analytics may process limited technical metadata as part of normal infrastructure operation, things like IP address, timestamps, and page-level usage events, this is separate from your CV content and isn't used to build a profile of you.

Your responsibility

Only upload a CV and information you have the right to share. Don't upload someone else's personal information without their permission.

Your rights

Depending on where you live, you may have rights over your personal data, including the right to access, correct, or request deletion of information we hold about you, to object to or restrict certain processing, to receive a copy of your data in a portable format, and to lodge a complaint with your local data protection authority. Because UpwardCV doesn't permanently store your CV content, many of these rights won't have much to act on for that specific content, it's already discarded. For anything else, or if you have a privacy question, contact cvforgeit@gmail.com.