Privacy Policy

1. What Data We Collect

Account information: your email address and name (if provided via Google sign-in).

CV content: the CV data you upload or paste, including work history, education, skills, and personal projects.

Career profile: additional context you provide during the tailoring process, such as side projects, informal skills, and answers to gap questions.

Job descriptions: the job descriptions you paste for tailoring purposes.

Usage data: basic analytics such as pages visited, features used, and session duration. We do not track you across other websites.

2. How We Use Your Data

Your data is used solely to provide the Talor service: tailoring your CV, generating PDFs, building your career profile, and matching you with relevant jobs (if enabled).

We never sell, rent, or share your personal data with third parties for marketing purposes. Your CV content and career profile are private and are never used to train AI models.

3. AI Processing

When you use the AI tailoring feature, your CV data and the target job description are sent to our AI provider (currently OpenAI) for processing. This data is transmitted securely and is not retained by the AI provider for training purposes.

We use the AI solely to reframe and optimise your existing experience — never to fabricate content.

4. Data Storage and Security

Your data is stored on secure servers within the European Economic Area (EEA). We use industry-standard encryption for data in transit (TLS) and at rest.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, or destruction.

5. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the service to function.

We use minimal analytics cookies to understand how users interact with the service. You can disable non-essential cookies through your browser settings.

6. Third-Party Services

Stripe: processes payments for Pro subscriptions. Stripe collects payment information directly — we never see or store your full card details. See Stripe's privacy policy at stripe.com/privacy.

OpenAI: processes CV tailoring requests. Data is sent via API and is not used by OpenAI for training. See OpenAI's API data usage policy.

Google: if you sign in with Google, we receive your name and email address from your Google account.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all your personal data, CV content, and career profile within 30 days.

We may retain anonymised, aggregated data (e.g., total number of CVs tailored) for analytics purposes. This data cannot be linked back to you.

8. Your Rights (GDPR)

If you are in the UK or EEA, you have the following rights under data protection law:

Right of access: request a copy of all personal data we hold about you. Right to rectification: correct any inaccurate data. Right to erasure: request deletion of your data. Right to data portability: receive your data in a structured, machine-readable format (JSON). Right to restrict processing: limit how we use your data. Right to object: object to processing of your data.

To exercise any of these rights, contact us at privacy@talor.ai. We will respond within 30 days.

9. Children's Privacy

Talor is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service. The effective date at the top of this page indicates when the policy was last updated.

11. Contact

For privacy-related questions or to exercise your data rights, contact us at privacy@talor.ai.