Legal

Privacy Policy

Last updated: 25 July 2026

Not yet legally reviewed. This page accurately describes what BramleyCV actually does, based on its real technical setup and confirmed business details — but it still hasn't been checked by a solicitor. Please have it properly reviewed for your specific situation before treating it as final.

Who we are

InformData Ltd, operating BramleyCV.com ("BramleyCV", "we", "us"). If you have any questions about this policy or how your data is handled, contact us at privacy@bramleycv.com.

What we collect

We collect only what's needed to provide the service:

DataWhy we collect it
Email addressTo create your account and send secure sign-in links (we don't use passwords)
Your uploaded Master CVThe source document all tailored CVs are generated from
Tailored CVs, cover letters, and recruiter emailsGenerated on your behalf and saved to your application history
Job details you search or pasteTo assess fit and tailor documents to that specific role
Reference details you choose to add (name, relationship, email)To help you draft reference-request emails, if you use this feature
Hiring manager name / context you provideTo personalise interview preparation, if you use this feature
Payment detailsHandled entirely by Stripe — we never see or store your card details ourselves
The role you're tracking in Skills Farm (job title, employer, start date)So your logged wins, goals and appraisals belong to the right job
Wins and challenges you logYour own record of what happened in a role — used to prepare you for appraisals and to feed your next CV
Your responsibilities in that roleTo give context to what you log and what gets drafted from it
Your career goal, and any goal you set for a roleTo point your tailored CVs, interview prep and logged wins in the same direction
Appraisal records you saveSo you can compare one appraisal to the next rather than rebuilding it from memory
Anything you write to explain a gap in your work historyOnly if you use this feature. You choose the wording, and whether it appears on a CV at all
Your answers in a practice interview, typed or spokenTo score the session and give you feedback on it
Something personal you choose to share for interview prepOnly if you add it. Used to make your pitch sound like you rather than a template
A one-way fingerprint of your Master CVTo stop the same CV being used to claim free credits across several accounts. It can't be turned back into your CV
Your subscription statusTo know which Skills Farm features your account has access to

Two of these deserve a specific mention. If you explain a gap in your work history, or log a challenge you worked through, you may end up writing something personal — an illness, a bereavement, caring for someone. You decide what to write, and whether it ever reaches a CV. We'd suggest keeping it to what you're comfortable having on record.

How we use it

  • To generate tailored CVs, cover letters, recruiter emails, and interview preparation using your Master CV and the job details you provide.
  • To search live job listings on your behalf via Reed.co.uk.
  • To send you account-related emails (sign-in links, receipts).
  • To process payments for Seeds and Interview Prep.
  • To keep your Skills Farm record, and to draft appraisal preparation and CV bullet points from what you have logged.
  • To score a practice interview and give you feedback on how you answered.

We do not sell your data, and we do not use your CV content to train AI models.

Who we share it with

BramleyCV is built on several trusted third-party services, each processing a specific part of your data to make the app work:

ServiceWhat it handles
SupabaseAccount authentication and database storage (hosted in the UK/EU region)
Anthropic (Claude)Generates your tailored CVs, cover letters, and interview prep content
Reed.co.ukProvides live job listing search results
StripeProcesses payments; card details go directly to Stripe, never through our own servers
ResendDelivers transactional emails such as sign-in links
CloudflareHosts the website and handles traffic

Each of these providers has its own privacy policy governing how they handle data on our behalf.

Speaking your answers. If you answer a practice interview question out loud, the conversion from speech to text is done by your browser, not by us. BramleyCV never receives or stores audio — only the text your browser produces. Depending on your browser, that conversion may happen on the browser vendor's servers rather than on your device. You can type your answers instead at any point.

Practice transcripts. What you say or type during a practice interview is used to produce your score and feedback. We do not keep the transcript afterwards — only the fact that the session ran, so you aren't charged for it twice.

How long we keep your data

We keep your data for as long as your account is active, with two ways to remove it yourself at any time:

  • Remove your Master CV — available directly from your account, this deletes the CV file itself immediately.
  • Delete an individual application — from your harvest history, this permanently removes that tailored CV, cover letter, and associated content immediately.
  • Delete a logged win or challenge — from your Skills Farm, this permanently removes that entry immediately.

To delete your account entirely — removing your email, Master CV, all saved applications, and any other personal details — email privacy@bramleycv.com. We aim to complete this within 30 days of your request.

Your rights

Depending on where you live, you may have rights to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your account and associated data
  • Export your data in a portable format
  • Object to or restrict certain processing

To exercise any of these, contact us at privacy@bramleycv.com.

International users

BramleyCV is available to users worldwide. If you're located in the EU or UK, your data is protected under GDPR / UK GDPR regardless of where you access the service from.

UK and EU GDPR are widely regarded as among the strictest privacy frameworks in the world, and complying with them covers most of what other regions require. It doesn't automatically guarantee full compliance with every other jurisdiction's specific rules, though — some, like US state laws, have their own distinct mechanisms GDPR doesn't directly replicate. In practice, US state privacy laws (such as California's CCPA) generally only apply to businesses meeting certain size thresholds — typically over $25 million in annual revenue and 100,000+ consumers in that state — which BramleyCV does not currently meet. We'll revisit this as the service grows.

Cookies and similar technologies

We use only the technical storage needed to keep you signed in securely (via Supabase authentication). We don't use advertising or tracking cookies.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page.

Contact us

Questions about this policy or your data? Email privacy@bramleycv.com.