Privacy Policy
This policy explains what we do with your information when you use the CV Rewrite service at cv.the-common-people.com. We keep it plain, and we keep your data for as little time as possible.
Who we are
The CV Rewrite service is run by Neil Copping, trading as The Com'mon People (a sole trader based in the United Kingdom). We are the "data controller" for the information described here.
Contact for any privacy question or request: [email protected].
Postal contact: [add your contact address here].
What we collect
- The CV text and job advert text you upload or paste.
- Any answers you give to our questions, whether typed or recorded by voice.
- Your email address, used to sign in to your account (passwordless), send your sign-in link and confirmation, and hold your credit balance.
- Basic technical data needed to run the site (a single session cookie, see Cookies below).
Your CV may contain personal information such as your name, contact details and work history. Please do not include information you would not want processed, and avoid including special category data (for example health or ethnicity) unless it is genuinely needed for the role.
We do not see or store your card details. Payment is handled entirely by Stripe.
Why we use it, and our legal basis
- To produce your rewritten CV and let you download it - this is necessary to perform our contract with you.
- To transcribe a voice answer, if you choose to record one - based on your consent (you can just type instead).
- To take your £5.00 payment - necessary to perform our contract.
- To send your confirmation email, if you provide an address - based on your consent.
Who processes your data for us
We use a small number of trusted service providers ("processors"), who act only on our instructions:
- Anthropic - the AI that rewrites your CV.
- OpenAI - transcribes a voice answer to text, only if you record one.
- Stripe - takes your payment securely.
- Resend - sends your confirmation email.
- Render - hosts the application.
Some of these providers are based in the United States. Where your data is transferred outside the UK, it is protected by appropriate safeguards such as Standard Contractual Clauses. We do not sell your data, and we do not use it to train AI models.
How long we keep it
- Uploaded files are deleted from our server as soon as the text has been read out of them.
- Your CV, advert and answers are held only for your working session (a few hours) so you can regenerate and re-download, and are then discarded. We do not keep a copy of your CV afterwards.
- Payment records are kept by Stripe and by us only as long as needed for accounting and legal obligations.
- Confirmation emails may be retained in our email system as a record of the transaction.
Your rights
Under UK data protection law you have the right to access your data, to have it corrected or erased, to restrict or object to its use, to data portability, and to withdraw consent at any time. To exercise any of these, email us at the address above. Because we delete your CV data quickly, there may be little left to act on after your session ends.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
We use a single essential "session" cookie so the app can remember your progress while you use it. We do not use tracking, analytics or advertising cookies, so there is nothing to opt into.
Security
The site runs over an encrypted (HTTPS) connection and we limit how long your data exists. No system is perfectly secure, but we take reasonable steps to protect your information.
Changes
We may update this policy from time to time. The "last updated" date at the top shows when it last changed.