CVCater is operated by Seika Group Ltd. ("we", "us", "our"). We are the data controller for the personal data processed through the CVCater website (cvcater.com) and the CVCater browser extension.
If you have any questions about this policy, please contact us at [email protected].
2. What Data We Collect
Account information: Your email address and a hashed version of your password when you create an account.
CV content: The CV/resume text you upload or paste for tailoring.
Job listing data: When using the browser extension, we extract the job title, company name, and job description text from the page you are viewing, solely to tailor your CV to that role.
Generated outputs: Tailored CVs, match scores, and analysis results stored in your account history.
Payment information: Billing is handled entirely by Stripe. We store your Stripe customer ID but never see or store your card details.
Usage data: Gem balances, subscription plan, and generation counts for service operation.
3. How We Use Your Data
To provide the CV tailoring service — your CV and job data are sent to OpenAI's API to generate role-specific outputs.
To manage your account, subscription, and gem balance.
To store your generation history so you can review past outputs.
To process payments via Stripe.
To respond to support requests submitted through the contact form.
4. Third-Party Services
OpenAI: CV text and job descriptions are sent to OpenAI's API for processing. OpenAI's API data usage policy states that data sent via the API is not used to train their models. See OpenAI's API data policy.
The CVCater browser extension operates on supported job board websites only (e.g. Indeed, LinkedIn, Reed, Totaljobs, Glassdoor, and others listed in the extension manifest). When you visit a supported job listing page, the extension:
Extracts the job title, company name, and job description text from that page.
Stores this temporarily in your browser's session storage.
Sends this data to CVCater's servers only when you click "Tailor CV for this Job".
The extension does not track your browsing history, monitor your activity on other websites, or collect any data outside of the supported job listing pages.
6. Data Storage & Security
Passwords are hashed using bcrypt and never stored in plain text.
Authentication uses JWT tokens stored in your browser's local storage.
All data is transmitted over HTTPS.
We do not sell or transfer your personal data to third parties for advertising, marketing, or any unrelated purpose.
7. Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the right to:
Access the personal data we hold about you.
Delete your account and all associated data — you can delete individual generations from your history at any time, or contact us to delete your entire account.
Rectify inaccurate personal data.
Object to processing of your personal data.
Data portability — receive your data in a structured, machine-readable format.
We retain your account data and generation history for as long as your account is active. You may delete individual generations at any time. If you wish to close your account entirely and have all data removed, contact us at [email protected].
9. Cookies
CVCater does not use tracking cookies or third-party analytics. Authentication tokens are stored in your browser's local storage, not as cookies.
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. Continued use of CVCater after changes constitutes acceptance of the revised policy.