Privacy Policy

What we collect

• Account details: email address, and password credentials or the sign-in provider you choose.
• Professional profile: profession, seniority, location and preferences you enter.
• CV text: the CV content you paste in, stored only after you agree to CV retention at sign-up.
• Career intent: your career goal text, target roles and timeline.
• Activity: roles you save or mark as applied, documents you request, gap analyses, and chat messages you send to Doc during a session.
• Billing: plan, status and renewal dates. Card details are handled by our payment processor and never reach our systems.
• Technical: sign-in session data, your theme and cookie choices, and aggregate usage and error logs.

Why we use it

• To run your account, plan and allowances.
• To match roles to your CV and career goal, and to explain why a role fits.
• To generate the CVs, cover letters and gap analyses you ask for.
• To send the emails you signed up for, and service messages about your account or billing.
• To keep the service secure, detect abuse and fix faults.

How AI processing works

When you request a match explanation, a CV, a cover letter, a gap analysis, or chat with Doc, the relevant parts of your CV, profile and career goal are sent to our AI provider so a response can be produced for you.

• We use this content to produce output for your account only. We do not sell it and we do not enrol it in any programme to train public models.
• Generated documents reframe your real experience into language applicant tracking systems read well. The prompts instruct the model not to invent degrees, licences, registrations, employers or dates — but you should still check every document before sending it.
• AI output can be wrong or incomplete. Treat it as a first draft, not a verified record.

Storage and security

Your records are held in our managed backend database, hosted on infrastructure that encrypts data in transit and at rest. Access rules on each table restrict your rows to your own signed-in account; our team can access records where necessary to run the service and support you.

No online service can promise perfect security. If a breach affects your personal information, we will notify you and the relevant regulator as the law requires.

How long we keep it

• Your CV is kept while your retention consent stands. Deleting your CV also deletes the documents and gap analyses generated from it.
• Account and profile records are kept while your account is open, then deleted or anonymised after closure.
• Billing and tax records are kept for as long as accounting law requires.
• Security and access logs are kept for a limited period for fraud and abuse investigation.

Who we share it with

We do not sell personal information. We use a small number of service providers, each handling only what their function needs:

• Application hosting and managed database, for storing and serving your records.
• AI model provider, for generating matches, documents, gap analyses and chat replies.
• Payment processor, for subscriptions, renewals and receipts.
• Email delivery provider, for digests and account emails.
• Analytics, for aggregate usage measurement — only if you accept optional cookies.

International transfers

Some of these providers process data outside Canada, including in the United States and the European Union. Where that happens, we rely on the provider's contractual data protection commitments.

Your rights

Whatever your location, you can ask us to:

• Confirm what we hold about you and give you a copy.
• Correct anything inaccurate.
• Delete your CV (available immediately in Career settings) or your whole account.
• Withdraw consent for CV retention, sponsored emails or recruiter contact, without losing access to the free board.
• Stop optional analytics cookies at any time from the cookie page.

Children

The service is intended for working professionals and is not directed at children. We do not knowingly collect information from anyone under 16.

Contact and dispute resolution

Questions, privacy requests, billing issues and complaints all go to support@madebydoc.com. We aim to send a first response within two business days, and to resolve privacy requests within 30 days.

If something goes wrong, please contact us first so we can try to fix it. Most issues are billing or data questions we can settle by email without any formal process.