Terms of Use
Last updated: 13.01.2026
1. Introduction and Acceptance of the Terms
Welcome to cvtailor.ai ("we", "us", or "our"). cvtailor.ai provides AI-powered resume and career advisory services through its website and related services (collectively, the "Services").
By accessing or using www.cvtailor.ai, creating an account, or using any part of the Services, you agree to be legally bound by these Terms of Use (the "Terms"). If you do not agree to these Terms, you must not access or use the Services.
You confirm that you are at least 16 years old (or the minimum legal age in your jurisdiction) and legally capable of entering into a binding contract.
2. Description of the Services
cvtailor.ai provides automated and AI-assisted resume analysis, feedback, and career-related suggestions based on information you upload. The Services are provided for informational and advisory purposes only and do not guarantee employment outcomes.
We may modify, suspend, or discontinue any part of the Services at any time, with or without notice.
3. User Accounts and Responsibilities
3.1 Account Registration
To access certain features, you may be required to create an account. You agree to provide accurate, complete, and up-to-date information and to keep such information current.
3.2 Account Security
You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account. You agree to notify us immediately at [email protected] if you suspect any unauthorised access or security breach.
We are not responsible for losses resulting from unauthorised use of your account due to your failure to safeguard credentials.
4. Acceptable Use and User Conduct
You agree not to use the Services to:
- Violate any applicable law or regulation;
- Upload unlawful, infringing, misleading, or harmful content;
- Upload malware, viruses, or other malicious code;
- Attempt to interfere with or disrupt the integrity or performance of the Services;
- Reverse engineer, decompile, or attempt to extract source code or models;
- Use the Services for commercial resale or competitive analysis without prior written consent.
We reserve the right to investigate and take appropriate action against violations, including suspension or termination of accounts.
5. User Content
5.1 Ownership
You retain ownership of the CVs, resumes, and other content you upload ("User Content").
5.2 Licence to cvtailor.ai
By uploading User Content, you grant cvtailor.ai a limited, non-exclusive, worldwide, royalty-free licence to host, process, analyse, and use such content solely for the purpose of providing and improving the Services.
This licence terminates when your content is deleted or your account is closed, subject to legal retention obligations.
6. Intellectual Property Rights
All content, software, algorithms, models, designs, and branding related to the Services (excluding User Content) are the exclusive property of cvtailor.ai or its licensors and are protected by intellectual property laws.
You are granted a limited, non-transferable, non-exclusive licence to access and use the Services for personal, non-commercial purposes only.
7. Privacy and Data Protection
Your use of the Services is subject to our Privacy Policy.
8. Third-Party Services and AI Providers
The Services may rely on third-party service providers, including AI technology providers.
9. Disclaimer of Warranties
THE SERVICES ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, CVTAILOR.AI DISCLAIMS ALL WARRANTIES.
10. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, CVTAILOR.AI SHALL NOT BE LIABLE FOR INDIRECT OR CONSEQUENTIAL DAMAGES.
11. Termination
We may suspend or terminate your access at any time.
12. Changes to the Terms
We may update these Terms from time to time.
13. Governing Law and Jurisdiction
These Terms shall be governed by the laws of the State of New York, USA.
14. Contact Information
Email: [email protected]
Privacy Policy
Last updated: 13.01.2026
1. Introduction
This Privacy Policy explains how cvtailor.ai ("we", "us", or "our") collects, uses, stores, and protects personal data when you access or use our website, applications, and related services (collectively, the "Services"). We are committed to complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable privacy regulations, and to being transparent about how your data is handled. By using our Services, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
For the purposes of applicable data protection laws, cvtailor.ai is the data controller responsible for your personal data.
For any privacy-related questions or requests, you may contact us at:
Email: [email protected]
3. Our Privacy Principles
- We collect only data that is necessary for providing and improving the Services;
- We process personal data lawfully, fairly, and transparently;
- We retain personal data only for as long as necessary;
- We implement appropriate technical and organisational measures to protect personal data;
- We enable users to exercise their data protection rights easily.
4. Personal Data We Collect
4.1 Information You Provide Directly
- Account information: email address and login credentials;
- User content: CVs, resumes, cover letters, and other career-related documents you upload;
- Communications: information you provide when contacting us for support or inquiries.
4.2 Automatically Collected Data
- IP address;
- Device type, operating system, and browser type;
- Pages visited, session duration, and interaction data;
- Referring URLs.
4.3 Cookies and Analytics Technologies
We use cookies, pixels, and similar technologies to ensure the proper functioning of the Services, analyse usage and performance, and improve user experience and product features. Where required by law, we obtain your consent before placing non-essential cookies. You may manage your cookie preferences through your browser settings or our cookie management tools.
5. Purposes and Legal Bases for Processing
We process personal data only where we have a valid legal basis. Depending on the context, processing is based on:
- Performance of a contract: to provide AI-powered CV analysis, feedback, and related Services;
- Legitimate interests: to improve, secure, and optimise our Services, provided such interests do not override your fundamental rights;
- Legal obligations: to comply with applicable laws and regulations;
- Consent: where explicitly required (e.g., certain cookies or marketing communications).
6. Use of AI and Third-Party Service Providers
We use third-party AI service providers and technical vendors to process CV content and generate personalised suggestions. These providers act as data processors and process data solely on our documented instructions; uploaded documents are processed only to generate the requested outputs; we do not allow third-party providers to use your data for their own purposes. Where applicable, data processing agreements are in place to ensure compliance with data protection laws.
7. Data Sharing and Disclosure
- With service providers acting on our behalf under contractual confidentiality obligations;
- To comply with applicable laws, regulations, or lawful requests from authorities;
- To protect the rights, property, or safety of cvtailor.ai, its users, or others;
- In connection with a corporate transaction, such as a merger, acquisition, or asset sale, subject to appropriate safeguards.
8. International Data Transfers
Your personal data may be processed in countries outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent legal mechanisms, in accordance with applicable law.
9. Data Retention
We retain personal data only for as long as necessary to provide and maintain the Services, fulfil the purposes described in this Policy, comply with legal obligations, and resolve disputes or enforce agreements. User-uploaded content may be deleted upon account deletion, unless retention is required by law.
10. Data Security
We implement appropriate technical and organisational security measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
11. Your Data Protection Rights
- Access your personal data;
- Request rectification of inaccurate or incomplete data;
- Request erasure of your personal data ("right to be forgotten");
- Object to or restrict certain processing activities;
- Request data portability;
- Withdraw consent at any time where processing is based on consent;
- Lodge a complaint with a competent data protection authority.
To exercise your rights, please contact us at [email protected]. We may need to verify your identity before fulfilling your request.
12. Children’s Data
The Services are not intended for individuals under the age of 16 (or the minimum legal age in your jurisdiction). We do not knowingly collect personal data from children.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. Where required by law, we will notify users of material changes.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at [email protected] .
Browser Extension Addendum
This addendum applies to the CVTailor browser extension. The sections above continue to apply for everything related to your account, billing, and tailored CV history; the addendum only covers what the extension itself reads, sends, or stores.
A. What the extension reads from your browser
Popup (you click the icon). No automatic browsing data. The popup queries the URL and title of the currently active tab only so we can tell you "we detected a job on this page". That metadata never leaves your machine unless you click "Tailor this job".
Content script (LinkedIn job pages only — https://*.linkedin.com/*). We only read the visible job title, company name, location, job description, and LinkedIn job id, and only after you click either the inline "Tailor with CVTailor" button or the "Tailor this job" button in the popup. We do not read DMs, profiles, your feed, or any page outside LinkedIn job postings.
B. What the extension sends to CVTailor
When you click a tailor action, we send the following to api.cvtailor.ai:
- Your bearer token (so we know which account this belongs to)
- The job payload: title, company, location, description, source URL, LinkedIn job id
- The browser user-agent and IP (standard HTTP request metadata)
When you sign in via magic link, the request also contains:
- The email address you typed
- The Chrome extension id (so we send the activation link back to the right install)
Google sign-in (optional). If you choose "Sign in with Google", the extension uses the browser's standard OAuth flow (chrome.identity). Google returns an authorization result that we exchange with api.cvtailor.ai to create your session. We only receive the basic profile and email you approve on Google's consent screen; we never see your Google password.
C. What the extension stores locally
Stored in chrome.storage.local (your machine only):
- Your CVTailor bearer token
- A cached copy of your user profile (name, email, credits)
- A timestamp used to throttle magic-link resend attempts
- A list of tailor jobs we are currently polling for "tailored CV ready" notifications
We never store the contents of LinkedIn pages or any job text locally.
D. What we do NOT do
- We do not scrape LinkedIn pages in the background
- We do not read profiles, messages, feed, or non-job LinkedIn pages
- We do not sell, rent, or share your data with third parties
- We do not embed advertising, analytics, or session-replay scripts in the extension
- We do not transfer data outside the providers listed in the main Privacy Policy above
E. Data retention (extension-specific)
- Bearer tokens expire after 90 days of inactivity and are rotated on every use
- Magic-link tokens expire after 15 minutes
- Single-use session-handoff tokens expire after 90 seconds
- Pending-tailor polling entries are discarded after 10 minutes if the job hasn't completed
F. Your controls
- Sign out of the popup at any time — your bearer token is revoked server-side and wiped from
chrome.storage.local - Uninstall the extension — Chrome removes all local data automatically
- Delete your CVTailor account from the account settings — your CVs, tailors, and tokens are removed from our servers
G. LinkedIn trademark
CVTailor is not affiliated with, endorsed by, or sponsored by LinkedIn Corporation. LinkedIn is a trademark of LinkedIn Corporation. We mention LinkedIn only as a factual descriptor of where the extension operates.