Privacy Policy

This Privacy Policy explains how VibeCV collects, uses, and protects your personal information. If you have questions, contact us at hello@vibecv.com.

Who we are

VibeCV is operated from the United Kingdom. We are the data controller for personal data processed through our services.

Information we collect

  • Account details such as name, email address, and password.
  • Resume, CV, and cover letter content you create or upload.
  • Usage data needed to operate and secure the service (e.g., IP address, device info).
  • Support communications and feedback you send to us.
  • Payment details are processed by Stripe if you purchase a paid plan.

Certain information is required to create an account and use the service. If you do not provide it, we cannot provide VibeCV to you.

How we use your information

  • Provide and maintain the VibeCV service.
  • Process resume/CV content for editing, scoring, and export.
  • Improve product performance and reliability.
  • Respond to support requests.
  • Prevent abuse and ensure platform security.

We do not use analytics or advertising cookies. We only send marketing emails if you opt in.

Legal bases (UK GDPR)

  • Contract: to provide the service you request.
  • Legitimate interests: to operate, secure, and improve the service.
  • Consent: for any optional communications you choose to receive.

AI processing

If you use AI features, we send limited content to our AI provider (Groq) to generate results. We do not use your content to train public models.

Third-party processors

  • Stripe (payments and billing, if you purchase a paid plan).
  • Supabase (authentication and data storage).
  • Groq (AI processing for selected features).

How we share data

We share personal data with trusted processors listed above to deliver the service. We may also disclose data if required by law, to protect our rights, or in connection with a business transaction such as a merger or acquisition.

International transfers

Your data may be processed outside the UK. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Data retention

We keep your account and content for as long as you maintain an account. You may request deletion at any time by emailing us. Backups may persist for a limited period before being overwritten.

Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data, and to object to certain processing. You can also withdraw consent at any time where consent is the legal basis. Contact us to exercise these rights.

Cookies

We use essential cookies required for login and core functionality. We do not use analytics cookies.

Security

We use commercially reasonable safeguards to protect personal data. However, no method of transmission over the internet is completely secure, and you use the service at your own risk.

Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice by posting an update on the site or by email.

Complaints

If you are in the UK, you can lodge a complaint with the Information Commissioner’s Office (ICO). You can also contact your local data protection authority if you are outside the UK.