Starter draft — not yet reviewed. This text was prepared as a starting point and must be reviewed by a qualified adviser before launch. Items in [square brackets] need completing. It makes no claim of legal compliance or certification.
Privacy policy
Last updated: [date of publication]
This policy explains how Tekinect (“we”, “us”), operating Build A CV, collects and uses personal data. We are the controller of your personal data. Contact: support@example.com, [Registered address to be confirmed]. [Add ICO registration number if applicable.]
What we collect
- Account data: name, email address, password (stored only as a secure hash by our authentication provider), sign-in times.
- Document content: the CVs and cover letters you create, which may include employment and education history and contact details you choose to add. We never require a photograph, date of birth or other sensitive information — please don't add special category data you don't need.
- Billing data: subscription status and dates. Card details are collected and held by Stripe, not by us.
- Usage data: counts and timings of AI tool use (not the content), security and audit events, and — only if you consent — anonymous product analytics events.
How and why we use it (lawful bases)
- To provide the service you sign up for, including storing your documents and running AI tools you request — performance of a contract.
- To take payments and manage membership — performance of a contract; keeping financial records — legal obligation.
- To keep the service secure, prevent abuse and fix errors — legitimate interests.
- Product analytics and optional product emails — consent, which you can withdraw at any time in Settings or the cookie settings.
AI processing
When you use an AI tool, the text that tool needs (for example your CV and a job description you paste) is sent to our AI provider, Anthropic, which processes it to generate a response. [Confirm and reference the current Anthropic commercial terms and data processing addendum, including retention periods and international transfer safeguards.] AI output is a suggestion: nothing changes your documents unless you apply it. We do not use your documents to train AI models.
Who we share data with
- Supabase — database, authentication and hosting of your data [state region].
- Anthropic — AI text generation (see above).
- Stripe — payment processing.
- [Hosting provider, email delivery provider.]
We do not sell personal data or use it for advertising.
International transfers
[Describe any transfers outside the UK and the safeguards relied on, e.g. the UK International Data Transfer Addendum or adequacy regulations.]
How long we keep data
Your account and documents are kept until you delete them or your account. Cancelling a membership does not delete documents. When you delete your account we delete your profile, documents and usage records; payment records are kept by Stripe and us for as long as the law requires [e.g. six years for tax purposes]. Security logs are kept for [period].
Your rights
You can access, correct, export or delete your data — most of this directly in Settings › Privacy & data. You can also object to or restrict certain processing and withdraw consent. Email support@example.com to exercise any right. You may complain to the Information Commissioner's Office (ico.org.uk).
Changes
We will tell you about material changes by email or in the app before they take effect.