Privacy Policy

dubaicv.app ("we", "our", "us") is an AI-powered CV builder designed for the Dubai and GCC job market. Our registered contact email is [email protected].

• Account data: email address and password hash when you sign up.
• Profile data: name, phone, location, work experience, education, skills, visa status, and any other information you enter to build your CV.
• Usage data: CV generations count, subscription plan, and timestamps.
• Photos: avatar/headshot images you optionally upload, stored in a Supabase Storage bucket and served via URL.
• Job postings: text or URLs you paste/share when generating a CV. These are processed by our AI and stored linked to your account.
• Payment data: we use Stripe for billing. We never store card numbers; Stripe handles all payment data under their own privacy policy.

• To generate tailored CVs using AI (Claude by Anthropic).
• To manage your account, subscription, and generation limits.
• To send transactional emails (account confirmation, password reset).
• To send a small number of service reminders about your own account — for example, that your free CV is still unused, a follow-up on an application you tracked, or a checkout you didn't finish. Every one of these emails has a one-click unsubscribe link.
• To improve and train our AI models and product features.
• To produce market intelligence, analytics, and research reports.
• To share with or sell to vetted third parties as described in section 3a below.

By using the Service and accepting these terms, you grant dubaicv.app a perpetual, worldwide licence to use, analyse, aggregate, and commercialise your data in the following ways:

• Aggregated & anonymised market data: We may compile and sell reports on job market trends, in-demand skills, salary benchmarks, hiring patterns, and workforce demographics derived from the platform's data. This data does not identify individual users.
• Business intelligence: De-identified and aggregated usage data may be shared with or sold to recruiters, staffing agencies, HR platforms, employers, and research organisations.
• Profile data with consent: We may share your profile data (name, skills, experience, nationality, visa status) with vetted employers and recruiters on an opt-in basis. We will ask for your explicit consent before doing so and you may withdraw it at any time by contacting us.
• AI model improvement: Your data may be used to fine-tune or improve AI models operated by us or our partners, in anonymised or pseudonymised form.

We will never sell your raw, identified personal data (name + email + CV combined) to third parties without your explicit prior consent. Aggregated and anonymised data is not subject to this restriction.

When you generate a CV, your profile data and job posting content are sent to Anthropic's Claude API to produce the output. Anthropic's data usage policies apply to that API call. We recommend not including sensitive personal information (passport numbers, salary history, etc.) beyond what is necessary for a CV.

Your data is stored in Supabase (PostgreSQL), hosted on AWS in the EU region. We apply row-level security policies so that each user can only access their own data. Connections are encrypted in transit (TLS) and at rest.

We use a single session cookie issued by Supabase Auth to keep you logged in. We do not use advertising cookies or third-party tracking pixels.

You have the right to:

• Access and download all personal data we hold about you.
• Correct inaccurate data via your profile settings.
• Delete your account and all associated data — contact us at [email protected].
• Object to or restrict processing in certain circumstances.

We retain your data for as long as your account is active. If you delete your account, we permanently delete your profile and generated CVs within 30 days. Aggregated, anonymised usage statistics may be retained indefinitely.

• Supabase — database and authentication.
• Anthropic (Claude API) — AI CV generation.
• Stripe — payment processing.
• Vercel — hosting and edge network.

We may update this policy from time to time. We will notify registered users by email of material changes. Continued use of the service after the update date constitutes acceptance.

Questions or requests regarding your data? Email us at [email protected].