Privacy notice

Data we process

• Account data such as your name, email address, authentication identifiers and plan.
• Career data you provide, including CVs, profile history, achievements, job descriptions, applications, contacts, interview notes and outcomes.
• Files or links you choose to attach as evidence.
• Integration data you authorize. Forwarded-email scanning processes only messages deliberately forwarded to your private SharpCV address; it does not open the rest of your inbox.
• Billing status and provider identifiers. SharpCV does not receive or store complete card details.
• Security, usage and diagnostic data needed to operate, protect and improve the service.
• First-touch campaign information such as source, medium, campaign, landing path and referring hostname. SharpCV does not retain the full referring URL for this purpose.

Purposes and lawful bases

• Contract: to create and secure your account, store the career information you submit, deliver requested scoring, tailoring, research, interview and workflow features, enforce plan allowances and administer subscriptions.
• Consent: for optional product analytics, outcome benchmarking and marketing contact where consent is required. These choices are off by default and can be changed in Plan & settings.
• Legitimate interests: to prevent fraud and abuse, diagnose reliability problems, protect the service and understand aggregate service performance, after considering the impact on users. You can object to this processing.
• Legal obligations: to retain or disclose limited information where tax, accounting, dispute, regulatory or law-enforcement rules require it.

SharpCV does not sell your CV, career evidence or application history and does not use it for behavioural advertising.

AI and automated recommendations

When you request an AI-assisted feature, the minimum relevant content may be sent to a configured model provider to produce that result. SharpCV applies usage limits, validation and evidence-grounding, but you must review generated material before using it. Fit scores, opportunity recommendations and generated materials are advisory: SharpCV does not make a hiring decision and does not use solely automated processing to make a decision that has a legal or similarly significant effect on you. You can disable AI processing in privacy settings, which disables features that require it.

Google account data

If you connect Google, SharpCV requests only the permissions displayed during authorization, currently identity, sending email you approve and creating calendar events you request. SharpCV does not request permission to read your Gmail inbox. OAuth credentials are used only to provide these user-visible features, are not used for advertising or to train general-purpose AI models, and are not disclosed to humans except with your affirmative agreement, for security investigation, to comply with law, or when aggregated so it cannot identify you. You can disconnect Google in Integrations or revoke access in your Google account.

SharpCV browser extension

The optional Chrome extension acts only when you click it. It uses temporary access to the active page to capture a job description or fill factual application fields you have saved locally. Contact details and approved reusable answers are stored in your Chrome profile, not read from unrelated pages or used for advertising. The extension never submits an application, answers sensitive declarations, runs background scraping or reads browsing history. Clipboard access is used only when you choose the copy action. Removing the extension deletes its locally stored extension data through Chrome's controls.

Recipients, providers and transfers

SharpCV uses specialist providers for hosting and delivery, including Vercel, Supabase, Polar, Resend and configured AI, search, email, contact-verification and sign-in providers. Provider use can vary by feature; optional connections are identified in Integrations. See the current service-provider list. Providers may process information outside your country under their contractual transfer safeguards and applicable law. SharpCV does not share private career content with universities or advertisers.

University cohorts

A university or partner code records cohort eligibility, seat use and aggregate adoption. Universities do not receive a student's CV, Achievement Bank, applications, private notes or individual outcomes from SharpCV unless the student separately asks SharpCV to share something.

Retention and deletion

Account data is retained while your account is active and as needed for security, billing, dispute and legal obligations. Default user-controlled document retention is 365 days and AI-cache retention is 30 days, where those controls apply. You can change available retention settings and request export, correction, restriction or deletion from Plan & settings. A deletion request may not remove records that must be retained for payment, fraud-prevention or legal compliance.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict or object to processing, withdraw consent and complain to a data-protection authority. Withdrawing consent does not affect earlier lawful processing. Use the privacy controls in Plan & settings or contact Help & support. You can object to direct marketing at any time and each marketing message will provide an opt-out.

Security and international processing

SharpCV uses access controls, encrypted transport, tenant-level data rules and signed provider webhooks. No online service can promise absolute security. Providers may process data in other countries using the safeguards available under their terms and applicable law.

Age requirement

SharpCV accounts are for people aged 18 or older. SharpCV does not knowingly offer accounts to children.

Contact and changes

Questions, objections, privacy requests and grievances can be submitted through SharpCV support or emailed to privacy@sharpcv.co. Material changes will be posted here with a new effective date. Also see the Cookie Notice.