Backchecker.cv

Privacy Policy (UK, Australia, and New Zealand)

1. Overview

This Privacy Policy explains how Checker CV (“we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use checker.cv.

Primary safeguard: We enforce a strict 24-hour data destruction policy, permanently deleting the uploaded PDF, parsed text, and generated .docx exactly 24 hours after upload.

2. Applicable Privacy Frameworks

We aim to comply with applicable privacy and data protection laws, including:

  • UK GDPR and the UK Data Protection Act 2018;
  • EU GDPR (where it applies);
  • Australian Privacy Act 1988 (including the Australian Privacy Principles); and
  • New Zealand Privacy Act 2020.

3. What We Collect

3.1 Information You Provide

  • The CV PDF you upload (which may include identifiers, contact details, employment history, education, and other personal information);
  • Optional inputs you provide to guide rewriting (if offered).

3.2 Payment Information

Payments are processed by Stripe. We receive limited transaction details (e.g., payment status, transaction identifiers). We do not store full card details.

3.3 Technical and Usage Data

We may collect:

  • Device, browser, and operating system information;
  • IP address;
  • Event logs (e.g., error logs, security logs);
  • Pages visited and actions taken;
  • Approximate location derived from IP address.

4. How We Use Information

We use information to:

  • Provide and operate the Service, including generating your CV output;
  • Process payments and prevent fraud;
  • Maintain security, logging, and service reliability;
  • Measure marketing performance and attribution (where enabled);
  • Comply with legal obligations and resolve disputes.

5. Lawful Bases for Processing (UK/EU)

Where UK GDPR/EU GDPR applies, we process personal data on the following bases as applicable:

  • Contract: to provide the Service you request;
  • Legitimate interests: to secure, maintain, and improve the Service, prevent fraud, and measure performance (balanced against your rights);
  • Consent: for certain cookies/pixels and marketing technologies where required;
  • Legal obligation: where we must comply with law.

6. 24-Hour Data Destruction

We permanently delete from our cloud servers:

  • The uploaded PDF;
  • Any parsed/extracted text; and
  • The generated Word (.docx) file;

exactly 24 hours after upload. Recovery after deletion is not possible. You are responsible for downloading your file before deletion.

7. AI Processing and OpenAI

We use the OpenAI API to analyse and rewrite CV text. We configure our use of the OpenAI API to prohibit OpenAI from using user data to train AI models. We use the API solely to deliver the Service.

8. Sharing and Disclosure

We may share personal information with:

  • Processors/service providers (e.g., cloud hosting, monitoring, email delivery, analytics) to operate the Service;
  • Stripe to process payments;
  • Advertising partners (Meta/TikTok) for attribution and marketing where enabled (see Cookie Policy);
  • Authorities where required by law or to protect rights and safety.

We do not sell personal information to data brokers.

9. International Transfers

We operate from New Zealand and may use service providers who process data in other countries. Where UK/EU data protection laws apply, we use appropriate safeguards for international transfers where required (such as contractual protections).

10. Data Retention

  • CV files and generated outputs: deleted exactly 24 hours after upload.
  • Operational records: we may retain limited logs and transaction records for longer periods for fraud prevention, security, accounting, and legal compliance. We minimise these records and do not retain full CV contents after deletion.

11. Your Rights

Depending on your location and applicable law, you may have rights such as:

  • Access to personal data;
  • Correction of inaccurate data;
  • Deletion (noting the 24-hour auto-deletion);
  • Objection or restriction of processing (UK/EU);
  • Data portability (UK/EU);
  • Complaints to a supervisory authority (UK/EU) or relevant privacy regulator (AU/NZ).

To exercise rights, contact support@checker.cv with subject “Privacy Request — Checker CV”. We may need to verify your identity.

12. Security

We use reasonable technical and organisational measures to protect personal information. No system is completely secure, and you use the Service at your own risk.

13. Children

The Service is not intended for children. We do not knowingly collect personal data from children.

14. Changes to This Privacy Policy

We may update this Privacy Policy by posting a revised version on checker.cv and updating the “Last Updated” date.

15. Contact

Privacy questions or requests: support@checker.cv
Operator: Checker CV, Waitoki, New Zealand