Your work is
your work.

The controller of personal information is [UPDATE BEFORE LAUNCH: registered legal name]. Its country of registration and postal address are [UPDATE BEFORE LAUNCH: country and full postal address].

Privacy questions and rights requests: info@freelancecvbuilder.com. The controller’s legal name and postal details must still be completed before this draft is published as a final notice.

• Account details such as your sign-in email and account identifier.
• CV content you save, including contact details, skills, summaries and other information you choose to enter.
• Project records and saved version snapshots, which may include client names, dates, rates, tools, outcomes and descriptions.
• Plan and subscription identifiers used to provide billing features. Stripe processes payment details; Freelance CV Builder does not store full payment card numbers.
• Your cookie choice in this browser and, only if accepted, the sidebar layout preference.

Do not save information about clients or other people unless you have permission to use it. Avoid entering special-category or highly sensitive information. AI-generated text should be checked before you use it.

We use account and CV information to provide the workspace, save and restore your CVs, export your data, support your account, administer subscriptions, protect the service and meet legal obligations. The final lawful-basis assessment for each purpose must be confirmed by the operator before launch.

The optional sidebar preference is stored only after you accept it. You can reject it and continue using the service; the sidebar choice then is not remembered between visits.

If you ask Freelance CV Builder to draft project bullets, the project name, client name, selected tone and rough project notes for that request are sent through Replit AI Integrations to Anthropic’s Claude model. Your full account and unrelated CV records are not included in that request. Do not submit confidential client material unless you are authorised to do so.

Replit’s published data-processing terms describe Anthropic in the United States as a downstream provider and include international-transfer provisions. We have not confirmed that those terms apply to this operator’s account. This draft does not claim that the operator has a separate direct agreement with Anthropic. Confirm the applicable Replit terms, processing roles and transfer safeguards before public launch.

If you import a PDF or DOCX CV, the file is temporarily stored in a private Supabase Storage bucket. Freelance CV Builder extracts selectable text on its server and sends the text to Anthropic’s Claude through Replit AI Integrations to identify professional skills and project details. We ask the model not to infer protected characteristics or unstated facts, and the import does not intentionally include contact details in the structured result. Scanned, image-only PDFs are not supported.

Imported skills and projects remain an unsaved draft until you explicitly save them in the editor. The original file is deleted after a successful save unless you separately opt in to keep it; discarding the import also deletes it. If you leave before saving or discarding, the temporary original may remain in private storage indefinitely because no automatic expiry is configured. A retained original stays private and can be downloaded or removed from its CV.

• Supabase provides sign-in, database and private storage services for temporary or user-retained CV originals.
• Stripe processes subscription payments and billing operations.
• Replit AI Integrations routes the requested drafting information to Anthropic’s Claude model.
• Resend is intended to send free-plan CV retention notices once the email configuration is complete.
• Google Fonts supplies the typefaces used by the site; your browser requests font files from Google and may share connection metadata such as your IP address and browser details.

These providers may process information outside the UK. The operator must identify the applicable locations, processor terms and lawful transfer safeguards before launch; this draft does not assume that a particular agreement covers every provider.

Uploaded CV originals are temporarily stored in private storage while you review an import. They are deleted after a successful save unless you explicitly choose to keep the original; discarding the import also deletes it. If you leave before saving or discarding, the temporary original may remain in private storage indefinitely because no automatic expiry is configured. A retained original remains until you remove it or delete the linked CV or account.

You can download a JSON copy of your CVs, saved versions and projects from Settings. Account deletion is available there; the current service states that hard deletion of personal data is completed within 30 days, subject to information that must be retained for legal or dispute-resolution purposes.

The intended free-plan rule is per CV: after 12 months without an edit to that CV, its projects or its saved versions, Freelance CV Builder will send an email warning at least 30 days before deletion. Deletion removes the CV and its linked projects and saved versions. Changing plan does not count as CV activity; a plan change clears any previous warning so a free-plan warning is sent again.

This automation is not enabled yet. The Resend sender/key and scheduled deployment still need configuration. Do not treat the intended retention schedule as active until those launch steps are complete.

Essential sign-in/session cookies are needed to authenticate you and keep the workspace secure. The sidebar preference cookie is optional and is written only after you accept optional cookies. Your accept/reject choice is stored in this browser so the banner can remember it. Use “Cookie choices” in the footer to reopen the controls.

The current app does not use advertising or analytics cookies. Google Fonts is loaded from Google as described above; it is an external font request, not an optional cookie.

Depending on your circumstances, UK data protection law may give you rights to access, correct, erase or receive a copy of your personal information, and to object to or restrict some processing. You can use Settings to export or delete your account, or contact the operator using the privacy email above once it has been completed.

You may also complain to the UK Information Commissioner’s Office (ICO). This notice should be checked against the operator’s actual processing and legal obligations before publication.