Privacy Policy

Last updated: June 2026

CV Align is a Chrome extension developed and operated by BridgeFX Ltd ("we", "us", "our"). This policy explains what data we collect, how we use it, and your rights regarding that data.

1. What we collect

• Email address — collected when you create an account, used to identify your account and send transactional emails (e.g. email confirmation).
• CV and document text — the text of your CV and any supporting documents you upload. Stored securely in our database and used solely to provide the analysis and document generation features.
• Job description text — text you paste or upload for analysis. Used to perform the match analysis and is not stored after the session.
• Usage data — the number of analyses you have performed in the current billing period, used to enforce free tier limits.
• Payment information — handled entirely by Stripe. We do not store your card details. We store only your Stripe customer ID to manage your subscription.

2. How we use your data

• To provide the CV analysis and document generation service
• To manage your account and subscription
• To enforce usage limits on the free tier
• To send transactional emails (account confirmation, receipts)

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in section 3.

3. Third parties

• Supabase — our database and authentication provider. Your account data and CV text are stored on Supabase infrastructure hosted in the EU. Supabase Privacy Policy.
• Anthropic — your CV and job description text is sent to Anthropic's Claude API to perform analysis and generate documents. Anthropic Privacy Policy.
• Stripe — payment processing. Stripe Privacy Policy.
• Vercel — our backend infrastructure provider. Vercel Privacy Policy.
• Google — if you sign in with Google, your authentication is handled by Google OAuth. Google Privacy Policy.

4. Data retention

Your account data and CV text are retained for as long as your account exists. When you delete your account, all associated data is permanently deleted from our systems within 30 days.

5. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (you can do this directly by deleting your account in the extension settings)
• Object to processing of your data
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

6. Security

We use industry-standard security practices including encrypted connections (HTTPS), row-level security on our database, and access controls to protect your data.

7. Children

CV Align is not directed at children under 13. We do not knowingly collect data from children.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last updated. Continued use of the extension after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this privacy policy or your data, contact us at: privacy@cvalign.com

BridgeFX Ltd · Registered in England and Wales