EmbedCV ("we", "us") is an AI-powered CV builder API and web application that enables job seekers to create tailored CVs and allows platforms (job boards, EdTech, and freelance marketplaces) to embed our tools natively. Our service is available at embedcv.com. For any privacy-related enquiries please contact us at info@embedcv.com.
2. Data we collect
Account data — name and email address, provided via Google OAuth or magic-link sign-in.
Profile content — work experience, education, skills, and any other sections you enter into your master profile.
Generated files — CVs and cover letters produced on your behalf, stored temporarily on Cloudflare R2 and deleted when no longer needed.
Payment data — handled entirely by Stripe. We never receive or store card numbers or full payment details.
Usage analytics — anonymised event data collected via PostHog (GDPR-compliant, no cross-site tracking). Used solely to improve the product.
Partner integration data — if you access EmbedCV through a partner platform, a short-lived Shadow Token is used to authenticate you without requiring a separate account. No additional personal data is shared with us beyond what you explicitly provide.
3. How we use your data
To authenticate you and provide the EmbedCV service.
To generate tailored CVs and cover letters using the OpenAI API. Your profile content is transmitted to OpenAI's API solely for this purpose and is subject to OpenAI's data processing terms.
To process payments securely via Stripe.
To send transactional emails (e.g. magic-link sign-in) via Resend.
To improve the product through anonymised, aggregate analytics.
4. Data retention
Your profile and generated CVs are retained for as long as your account is active. You may permanently delete your account and all associated data at any time via Settings → Delete Account. Deletion is completed within 30 days.
5. Your rights (GDPR)
If you are located in the EU/EEA or the UK, you have the right to access, rectify, port, restrict processing of, or erase your personal data. Use the Export My Data button in Settings to download your data, or contact us at info@embedcv.com to exercise any other right. You also have the right to lodge a complaint with your local data protection authority.
6. Cookies
We use a session cookie for authentication purposes. An optional referral cookie (30-day expiry) may be set if you arrive via a referral link. We also use an analytics cookie via PostHog to understand aggregate usage patterns. No third-party advertising or tracking cookies are used. See our Cookie Policy for full details and your consent options.
7. Third-party services
OpenAI — profile content is sent for AI-powered CV generation.
Stripe — secure payment processing.
Cloudflare R2 — temporary PDF file storage.
Resend — transactional email delivery.
PostHog — anonymised, GDPR-compliant analytics.
8. Data security
All data is transmitted over HTTPS. Access to personal data is restricted to authorised personnel only. We apply industry-standard security practices across all systems.
9. Contact
For any questions about this Privacy Policy or your personal data, email us at info@embedcv.com.