Privacy Policy

1. Who We Are

CVMatchUp ("we", "us", "our") operates the service at match-my-cv-60.lovable.app. For the purposes of UK data protection law, we are the data controller in respect of personal data processed through the Service.

Our contact address for data-related enquiries is: mark.driver@spectrumglo.co.uk.

The data controller is Spectrum Glo Solutions, Barnsley, South Yorkshire, United Kingdom. We are registered with the UK Information Commissioner's Office (ICO) under registration number CSN2702885.

This Privacy Policy explains what personal data we collect, how we use it, and what rights you have. It applies to all users of the Service, including guest users and registered account holders.

2. Data We Collect

We collect the following categories of data:

Account data (registered users only)

• Email address
• Password (stored in hashed form — we never store it in plain text)
• Account creation date and subscription status

CV & job data (registered users only)

• CV text you paste into the Service
• Job titles and job descriptions you submit
• Alignment scores and scoring history associated with your account

Guest mode

• CV and job description text submitted during a guest session is processed in real time and not stored after the session ends. We do not associate it with any identifier.

Payment data

• Billing transactions are handled by our third-party payment processor. We receive only a payment confirmation and your subscription status — we do not receive or store your full card number.

Technical data

• IP address, browser type, and device information collected automatically via server logs and cookies (see Section 7).
• Usage data such as pages visited and features used, collected in aggregate for service improvement.

3. How We Use Your Data

We use the data we collect for the following purposes and on the legal bases indicated:

• Providing the Service — processing your CV and job spec to generate scores and Outputs. Legal basis: contract performance.
• Account management — creating and managing your account, authenticating logins, and handling password resets. Legal basis: contract performance.
• Billing & subscriptions — managing Pro plan payments, renewals, and cancellations. Legal basis: contract performance and legal obligation.
• Service improvement — using aggregated, anonymised usage data to identify bugs and improve scoring accuracy. Legal basis: legitimate interests.
• Security & fraud prevention — detecting and preventing abuse of the Service. Legal basis: legitimate interests and legal obligation.
• Legal compliance — retaining records as required by applicable law (e.g. tax and financial records). Legal basis: legal obligation.

We do not use your CV or job description data to train AI models, and we do not sell your personal data to third parties.

4. How We Share Your Data

We do not sell or rent your personal data. We may share it in the following limited circumstances:

• Service providers: We use third-party sub-processors (such as our hosting provider, payment processor, and AI model provider) who access data only to perform their services on our behalf and are bound by appropriate data protection agreements.
• Legal requirements: We may disclose data where required by law, court order, or to protect the rights, property, or safety of CVMatchUp, our users, or others.
• Business transfers: If CVMatchUp is acquired or merged with another entity, your data may be transferred as part of that transaction. We will provide notice of any such transfer.

All third-party sub-processors who handle personal data are required to process it in accordance with UK GDPR standards.

5. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter, or as long as necessary to comply with our legal obligations.

• Account data: Retained for the lifetime of your account, plus up to 90 days after deletion to allow for recovery if requested.
• CV & scoring history: Retained for the lifetime of your account. You can delete individual runs from your history at any time.
• Guest session data: Not retained beyond the active browser session.
• Payment records: Retained for 7 years as required by HMRC financial record-keeping obligations.
• Server logs: Retained for up to 90 days for security and debugging purposes.

6. Your Rights Under UK GDPR

If you are based in the UK or EEA, you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Ask us to delete your personal data, subject to legal retention requirements.
• Right to restriction: Ask us to restrict processing of your data in certain circumstances.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at mark.driver@spectrumglo.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

CVMatchUp uses a small number of cookies to operate the Service:

• Strictly necessary cookies: Required for authentication and session management (e.g. keeping you logged in). These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand aggregate usage patterns. We use anonymised data only and do not track individual users across third-party websites.

We do not use advertising or tracking cookies. You can manage cookie preferences in your browser settings. Blocking strictly necessary cookies will impair your ability to use the Service.

8. International Transfers

Your data may be processed by sub-processors whose infrastructure is located outside the UK or EEA. Where such transfers occur, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or reliance on the UK adequacy framework, as applicable.

If you would like more information about the specific safeguards we apply, please contact us.

9. Security

We take the security of your data seriously. Our measures include:

• All data in transit is encrypted using HTTPS/TLS.
• Passwords are hashed using an industry-standard algorithm — we never store them in plain text.
• Access to personal data is restricted to authorised personnel on a need-to-know basis.
• We conduct regular reviews of our security practices.

No method of transmission over the internet is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) or by posting a notice on the Service. The effective date at the top of this policy will always reflect the date of the latest revision.

Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact & Complaints

For any privacy-related questions, requests to exercise your rights, or complaints:

Email: mark.driver@spectrumglo.co.uk
Website: match-my-cv-60.lovable.app

If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint · 0303 123 1113

← Back to home