Privacy Policy

• Your account details. When you sign up we store your email address and, if you registered with a password, a securely hashed version of it. We never see or store your password in readable form. If you sign in with Google we receive your name, email address, and profile picture from Google, not your Google password.
• Your CV. When you request a review we store the file you upload, the text extracted from it, and the career level you selected.
• Your reviews. The score, verdict, and written feedback produced for each CV are saved to your account.
• Your acceptance of these policies. We record the date and version of the Terms & Conditions you accepted when you registered.
• Feedback you send us. If you submit feedback through the app, we store what you wrote alongside your account.
• Basic technical data. Our servers keep standard logs (such as IP address, browser type, and time of request) for security and debugging.

Your CV file is uploaded to a private storage bucket. It is not published, not indexed by search engines, and there is no public link to it. Only your own account and our operations team can reach it.

We also keep the plain text extracted from the file, because that is what the review is produced from, and the finished review itself, so your history stays available to you on your dashboard.

Our operations team can open stored CVs. This is limited to running the service: investigating a failed review, answering a support request you have sent us, and checking the quality of the feedback the system produces. We do not read CVs for any other reason, and we never pass them to recruiters, employers, or anyone else.

The review is generated by a third-party AI model, not by a person and not by a model we run ourselves. Being clear about what that involves:

• We extract the text from your CV on our own servers. The file itself is never sent anywhere outside our own storage.
• That extracted text, which contains your personal details exactly as they appear on your CV, is sent over an encrypted connection to OpenRouter, which routes it to the model that produces the review. The model currently in use is Google Gemini.
• We send the CV text, today's date, and the career level you selected. We do not send your email address, your account name, or your password.
• We ask these providers not to use content sent through the API to train their models, and their standard API terms say the same. We cannot audit them, so we are telling you plainly that a third party processes your CV text rather than promising something we cannot verify.
• The AI is given the text once, per review. It does not keep a memory of you between reviews, and each review starts from scratch.
• AI output can be wrong. A review is an opinion generated by software, not professional careers advice, and not a judgement about you.

To produce your CV review, to show you your review history, to enforce the free review limit on each account, to reply to you when you contact us, and to keep the service secure and working.

We do not sell your data, rent it, share it with recruiters or employers, or use it to advertise to you.

• Supabase, which hosts our database, our file storage, and the accounts system.
• OpenRouter and, through it, Google, which generate the AI review from your CV text.
• Our hosting provider, which serves the website and keeps the server logs described above.

We use a single cookie, which keeps you logged in. It is required for the service to function. We use no advertising or tracking cookies.

We keep your account, CVs, and reviews for as long as your account exists, so that your history stays available to you. When you delete something, we delete it: there is no archive copy waiting behind the scenes.

Server logs are kept for a short period for security and debugging, and then rotated out.

You can do all of this yourself, immediately, from the Your data section of your dashboard. Nothing needs to be requested by email and nothing waits on us.

• Delete a single review. Removes that review and the CV file it was produced from.
• Delete all CVs and reviews. Removes every stored CV file and every saved review, and leaves your account open.
• Delete your account. Removes your CVs, your reviews, your feedback, and the account itself. This cannot be undone, and you are signed out immediately afterwards.

Email us at info@mycareerdeveloper.com to get a copy of your data or to correct it, and we will respond within 30 days. You can also ask us to delete data by email if you would rather not use the dashboard.

If you would rather not have a CV stored with us at all, please do not upload one. A review cannot be produced without it.

My Career Developer is not intended for anyone under 16, and we do not knowingly collect their data.

If we change how we handle your data, we will update this page and the date above. Continuing to use the service after a change means you accept the updated policy.

Questions about privacy, or about this policy, go to info@mycareerdeveloper.com.