Privacy Policy

Last updated: 19 April 2026

CraftAI CV ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website, services, and browser extension.

We collect the minimum amount of information required to provide our service.

Information you provide

• Email address – used for account access, communication, and purchase records
• CV content – including text from uploaded CVs or information entered manually. This is stored securely on our servers to power features such as form auto-fill and CV tailoring
• Application preferences – such as work location preference, notice period, right to work, and salary expectations, used to auto-fill job application forms
• Job descriptions – used to tailor your CV and match it against role requirements
• Payment information – processed securely by Stripe (we do not store card details)

Information collected automatically

• Basic usage data (such as page visits, feature usage, and timestamps)
• Technical information (such as browser type and device information)
• Application activity — when you use the browser extension to fill in a job application, we log the company name, job title, application URL, and any AI-generated answers, to populate your Applications tracker

Information collected by the browser extension

The CraftAI CV browser extension collects the following when you use it:

• Job description content – extracted from job listing pages (LinkedIn, Indeed, Glassdoor, Reed, Totaljobs) to enable CV tailoring and match scoring
• Form field labels – read from job application forms on supported platforms (such as Greenhouse, Lever, Workable) to determine which fields to fill and how
• Field corrections – when you manually correct a value the extension has filled, the correction is saved to improve accuracy for all users on the same platform. Corrections are stored against the form platform hostname and field type only — no personally identifiable information is included
• Authentication tokens – your session token is stored locally in your browser (chrome.storage.local) to keep you signed in. It is never shared with third parties

The extension does not read page content outside of job listing and application pages. It does not access passwords, payment details, or unrelated browsing activity.

We use your information to:

• Store and manage your CV so it is available across devices and for extension features
• Structure and tailor your CV using AI
• Auto-fill job application forms on your behalf
• Score how well your CV matches a job description
• Generate and store a tailored CV in the background when you apply to a role (Auto-Tailor)
• Track job applications you submit via the extension
• Manage tailor credits and subscription status
• Process payments
• Provide support and respond to enquiries
• Improve product performance and usability

We do not sell your personal data.

CraftAI CV uses AI models provided by OpenAI to help structure and tailor CV content, match your CV against job descriptions, generate answers for application form fields, and auto-fill forms intelligently.

Before AI processing:

• Personal data is minimised where possible
• AI requests are used solely to generate content or make decisions for you

Your data is not used to train AI models.

We use trusted third-party services to operate CraftAI CV:

• Supabase – database, authentication, and user records
• OpenAI – AI-powered CV structuring, tailoring, and form filling
• Stripe – secure payment processing
• Railway – application hosting and infrastructure

These providers only process data as required to deliver their services and are contractually obligated to protect your information.

Your CV content and application preferences are stored securely on our servers so they can be accessed by the browser extension and across devices.

The browser extension caches your CV data, preferences, and subscription status locally in your browser (chrome.storage.local) for performance. This cache is cleared when you sign out.

Job description content extracted from job listings is stored temporarily in your browser only and is not retained on our servers beyond the lifetime of the tailoring or form-fill operation.

Application tracking records (company, job title, application URL, AI answers) are retained until you delete them from your Applications page or request account deletion.

Usage and account-related data (such as email address, tailor credits, and download records) is stored securely to support core functionality.

You may request deletion of your account and associated data at any time.

If you are located in the UK or EU, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing
• Withdraw consent where applicable

To exercise your rights, contact us using the details below.

CraftAI CV uses limited cookies or similar technologies required for basic site functionality and performance. We do not use advertising or invasive tracking cookies at this time.

We implement appropriate technical and organisational measures to protect your personal data. However, no system is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

If you have questions about this Privacy Policy or how your data is handled, contact us at:

Email: [email protected]
Service: CraftAI CV