Privacy policy

When you create an account we collect the email address associated with your beta invitation. This is the minimum required to authenticate you and send essential service communications.

During onboarding and regular use you voluntarily enter profile information: work history, skills, education, salary expectations, and career context. You control what you add and what you leave blank.

When you use the analysis or Apply Package features we store the job URLs you submit and the application data you generate — CV drafts, cover letter drafts, custom answers, and analysis results.

We collect basic technical log data such as request timestamps and error events. We do not collect behavioural analytics or page-view tracking during the beta period.

We use your data to deliver the features you signed up for. Your profile powers CV tailoring and analysis. Your job data populates your pipeline and feeds the interview prep tools.

We may use anonymised, aggregated signal data to improve the accuracy of our AI prompts over time. This is used internally only and never shared or sold.

We do not sell personal data to any third party. We do not share your data with recruiters, employers, or job boards. There are no ads on Cvello and no plans to introduce them.

Cvello runs on Cloudflare infrastructure. Your data is stored and served via Cloudflare Pages, D1 (database), R2 (object storage), and Workers (compute). Cloudflare acts as a data processor under a Data Processing Agreement.

AI-powered features are powered by Anthropic’s Claude API. When you trigger an AI feature the relevant data is sent to Anthropic to generate a response. Anthropic acts as a sub-processor and we send only what is needed for the task.

We do not use any other third-party services that receive personally identifiable information during the beta period. If that changes we will update this policy and notify users.

Your account data — profile, applications, drafts, and interview records — is retained for the lifetime of your account. Deleting your account permanently removes all associated data. There is no grace period and no recovery after deletion.

AI call logs are retained for 30 days and then automatically deleted. Application event logs are retained for 90 days on a rolling basis.

PDF files generated during export are garbage-collected within 24 hours of generation. We do not retain PDF exports on our servers.

You have the right to access all data we hold about you. Export your profile and application data as a JSON file at any time from account settings — it is self-serve.

You have the right to deletion. Deleting your account removes your email, profile data, application records, AI-generated drafts, and all associated logs within a standard processing window. The action is irreversible.

If you are located in the European Union or EEA you may have additional rights under the GDPR, including the right to restrict processing or lodge a complaint with your national supervisory authority.

Cvello uses cookies strictly for session management and CSRF protection. These are essential cookies required for the application to function securely. They do not track you across sites and are not used for advertising.

We do not use analytics cookies, marketing pixels, or third-party tracking scripts during the beta. Because only essential cookies are used, no consent banner is required under the ePrivacy Directive essential exemption.

If we introduce non-essential cookies in the future we will update this policy, implement a consent mechanism, and notify users before doing so.

For any privacy-related questions, data requests, or concerns, contact the founder directly using the contact method provided in your beta invitation. A dedicated support email address will be published before public launch.

We will respond to data-related requests within a reasonable timeframe and, where required by applicable law, within 30 days of receipt.