Privacy policy
Last updated: 25 September 2026
Who we are
CV Tailor is operated by Search Click Group Ltd ("we", "us"), a company registered in England and Wales. This policy explains what we collect, why, and what you can do about it.
Contact: hello@searchclickgroup.com
Your CV and the job advert
This is the part most people are actually asking about, so it goes first.
The CV and job advert you submit are sent to Anthropic's API to produce the rewrite, and returned to your browser. We do not store the text of your CV, the advert, or the generated result on our servers, and we do not keep a copy after the request finishes. Editing and exporting happen entirely in your browser.
Anthropic processes the text as our sub-processor in order to return a result. See Anthropic's privacy policy.
Because nothing is stored, we cannot recover a result for you after you close the tab. Export or copy anything you want to keep.
What we do collect
- Your email address, if you buy credits or create an account. At checkout it comes from Stripe; otherwise you give it to us to sign in. We store it against your credit balance so the credits you paid for are still there next time.
- Your first name — from the name on your payment if you buy credits, or if you give one when signing in. It is used only so emails from us aren't addressed to "user". We store your first name only, never your full name.
- Sign-in links. We store a one-way hash of each link, never the link itself, along with the address it was sent to and when it expires. Used and expired records are deleted daily.
- A record of credit movements — purchases and generations — so we can answer "where did my credits go".
- A one-way hash of your IP address, used to limit how many free generations one connection can take. We store the hash, not the address, and it cannot be reversed back into an IP.
We do not sell your personal data.
Marketing
We only send you marketing if you have explicitly opted in — an unticked box you chose to tick, never a consequence of buying something or creating an account. Sign-in links and receipts are not marketing and are sent regardless, because you asked for them.
You can withdraw consent at any time by using the unsubscribe link in any marketing email or by emailing us. Withdrawing it does not affect your credits or your account.
Payments
Payments are processed by Stripe. We never see or hold your card details. Stripe acts as a data controller for payment information under its own terms — see Stripe's privacy policy.
Cookies
- Essential. A signed cookie identifying which credit balance this browser may spend, and a cookie counting free generations. The site cannot work without these and they are not used for tracking.
You can clear cookies at any time in your browser. Clearing them will disconnect this browser from your credit balance until you sign in again with the email you paid with.
Who processes your data for us
Anthropic (producing the rewrite), Stripe (payments), Supabase (hosting the database, in the UK), Vercel (hosting the site) and Resend (sending sign-in links and any email you’ve opted into). Each processes data on our instructions under its own terms.
How long we keep things
Credit balances and their ledger are kept while your account has a balance or history, and for up to six years after the last purchase, which is how long UK tax rules require us to keep records of a sale. IP hashes are kept for 90 days.
Your rights
Under UK GDPR you can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email hello@searchclickgroup.com and we'll respond within 30 days. You also have the right to complain to the Information Commissioner's Office.
Note that deleting your data removes your credit balance with it, and we cannot restore it afterwards.
Changes
We may update this policy. Changes appear on this page with a new "last updated" date.