Privacy Policy

Last updated: July 2026

CV Align is a Chrome extension developed and operated by BridgeFX Ltd ("we", "us", "our"). This policy explains what data we collect, how we use it, and your rights regarding that data.

1. What we collect

• Email address — collected when you create an account, used to identify your account and send transactional emails (e.g. email confirmation).
• Authentication data — when you sign in (via email/password or Google Sign-In), we collect and store authentication credentials/tokens necessary to verify your identity and keep you signed in, via Supabase Auth. If you sign in with Google, we receive basic profile information (name, email address) from your Google account via Google OAuth.
• CV and document text — the text of your CV and any supporting documents you upload. Stored securely in our database and used solely to provide the analysis and document generation features.
• Job description text — text you paste or upload for analysis. Used to perform the match analysis and is not stored after the session.
• Usage data — the number of analyses you have performed in the current billing period, used to enforce free tier limits.
• Anonymous trial data — if you use the free trial without creating an account, we generate a random identifier stored on your device and, alongside it, record your IP address and the number of trial analyses used. This is used solely to enforce free trial limits and prevent abuse (e.g. repeated reinstalls to bypass the limit). It is not linked to any account unless you subsequently sign up, at which point your trial CV may be carried over into your new account at your request. Anonymous trial records are deleted automatically after 14 days.
• Payment and financial information — handled entirely by Stripe. We do not store your card details. We store only your Stripe customer ID and subscription status to manage your billing.

2. How we use your data

• To provide the CV analysis and document generation service
• To manage your account and subscription
• To enforce usage limits on the free tier and free trial
• To send transactional emails (account confirmation, receipts)

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in section 3.

3. Third parties

• Supabase — our database and authentication provider. Your account data and CV text are stored on Supabase infrastructure hosted in the EU. Supabase Privacy Policy.
• Anthropic — your CV and job description text is sent to Anthropic's Claude API to perform analysis and generate documents. Anthropic Privacy Policy.
• Stripe — payment processing. Stripe Privacy Policy.
• Vercel — our backend infrastructure provider. Vercel Privacy Policy.
• Google — if you sign in with Google, your authentication is handled by Google OAuth. The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Google Privacy Policy.

4. Data retention

Your account data and CV text are retained for as long as your account exists. When you delete your account, all associated data is permanently deleted from our systems within 30 days.

5. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (you can do this directly by deleting your account in the extension settings)
• Object to processing of your data
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

6. Security

We use industry-standard security practices including encrypted connections (HTTPS), row-level security on our database, and access controls to protect your data.

7. Children

CV Align is not directed at children under 13. We do not knowingly collect data from children.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last updated. Continued use of the extension after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this privacy policy or your data, contact us at: privacy@cvalign.com

BridgeFX Ltd · Registered in England and Wales