Privacy

Last updated: 5 October 2026. Version 2026-10-05.

updatemycv.com is operated by UpdateMyCV Technologies LLC. UpdateMyCV Technologies LLC is a licensed and registered entity in the United Arab Emirates. That company decides how your information is used and is responsible for it. You can reach us at hello@updatemycv.com.

The short version

Your CV is used to produce your score, your job match and your optimised CV. We also check it for hidden instructions aimed at our automated assessment, and we calculate a fingerprint of its text so that an unchanged copy of the same CV, uploaded again, can reuse the results already produced for it. The fingerprint is a fixed-length code: your CV cannot practically be rebuilt from it, but an identical copy of the same text produces the same code, so we treat it as part of your CV record and it is deleted with your CV. Your CV is never provided to recruiters or employers and is never sold. It is disclosed only to the service providers required to operate UpdateMyCV, as explained below.

What we collect

• Your CV file and the text we extract from it, so we can analyse and rewrite it.
• Details taken from your CV: job title, employer, skills, years of experience, location, and where your CV states them, nationality, visa status and notice period. These come only from what you uploaded; we never guess them.
• Any job description you paste or link, so we can compare it to your CV.
• Your email address, when you verify it. Your verified address is your account.
• Your account and purchases: which packages you have bought, what each one included, what you have used of it, and the documents we have generated for you. Payment card details are not in this list: we never receive them.
• Usage records: which features were used and when, and what each of those cost us to run. They are linked to the identifiers stored in your browser, one for your session and one that records only which site linked you to us, usually to a coded value created from your network address, and, where you have one, to your account. Each record also carries one word for the kind of device you used, phone, tablet or desktop computer, worked out from the standard description your browser sends with every request. We keep that one word to understand where people are using the service. We do not store the description itself, and we do not record your browser, its version, your operating system or your screen size. When our automated checks detect instructions hidden in a CV or job description, the record also includes the type of issue and short excerpts, up to 120 characters each, of the text that triggered it.
• The applications you choose to track: the job title, employer and location of a job you saved, your match score for it, the dates you set, and any notes you write. Notes are yours: only you see them, and they are never used to write or change your CV. This record is kept until you delete it, which you can do at any time from the applications screen. It is deliberately not on the 90-day clock below, because a record of where you applied is worth having long after the CV that went with it has gone.
• Where you arrived from: the name of the site that linked you to us, such as a search engine or a social network, and the campaign tag on the link where it has one. We keep the site name and the tag only, never the full address of the page you came from, so nothing in it, such as what you searched for, reaches us. This is kept against the identifiers stored in your browser so we can tell which channels bring people here.

There is no password and no login form. A random identifier is stored in your browser and may remain there for up to 365 days. It connects your CV, your results and your downloads so you can return to them, and it is used to apply usage limits.

To apply usage limits and protect the service from misuse, our server reads the network (IP) address your request comes from and creates a coded value from it using a secret value. Our application database stores that coded value, not the network address itself. Because the coded value can still recognise repeated requests from the same network, we treat it as pseudonymous personal data. Our hosting, analytics and other infrastructure providers may also process network information, including your network address, under their own policies.

Your email address, and what it is for

Your email address is your account. You verify it with a six-digit code, and there is no password to set and no registration form to fill in.

We use it for three things and nothing else:

• To send you that six-digit code.
• To connect your packages and your documents to you, so that you can reach them from a different device and after clearing your browser.
• To send you service and account messages, such as a payment receipt or an answer to something you asked us.
• If you tick the option to receive CV and job-search tips, we will occasionally send them to the same address. You can switch this off at any time from your account page or from any such email, and your choice never affects messages about your own documents.

We do not use it for marketing, we do not sell it, and we do not provide it to recruiters or employers. Marketing would require your separate consent, which we would ask for on its own, unticked, and record. Addresses collected before this policy was published are not marketing consent either.

Verification and account emails are sent through our email provider, which processes them in the European Union (Ireland).

Who can see your CV

Your CV file is stored privately and is not accessible through a public or shared link. It is processed only by UpdateMyCV and the service providers required to operate the service. It is never provided to recruiters or employers, including any recruitment business associated with UpdateMyCV.

To analyse your CV and generate your results, we use trusted third-party AI and cloud service providers acting on our behalf. Our AI provider processes the information we send for analysis under its applicable commercial terms, including its data-use and retention conditions.

We may share personal data with carefully selected service providers that support CV analysis, cloud hosting, database storage, payment processing, email delivery, security and website operations. These providers process information only as necessary to provide their services to us and are subject to applicable contractual and confidentiality obligations.

Payments

Payments to UpdateMyCV Technologies LLC are handled by Stripe. Your card details go to Stripe and never to us: we do not see them, we do not store them, we could not charge your card ourselves, and we never hold complete card details in any record of our own.

What we keep is the record of the purchase: which package, the amount, the currency, the date, whether it was paid, and the reference Stripe gives it. That record is connected to your verified email address and contains nothing from your CV.

Stripe processes payment data as its own controller under its privacy policy, which you can read at stripe.com/privacy.

Where it is stored, and where it is processed

Your CV, your results and your email address are held in private, access-controlled storage operated by our service providers on our behalf. Everything travels over an encrypted connection. Your CV content is never written into web addresses or application logs.

While a tab is open, your browser also keeps the text we extracted from your CV, its file name, the start of any job description you submitted and the keywords you ticked, so the screens can show them. This copy stays on your device, and your browser normally clears it when you close the tab.

Some of our service providers process personal data outside the UAE. Specifically, your CV and results are stored on database and file storage located in India, and are processed by our hosting and technology providers in the United States. Verification and account email is processed in the European Union (Ireland). Where personal data is transferred outside the UAE, we use appropriate contractual, organisational and technical safeguards designed to protect your information.

How long we keep it

Two periods run alongside each other.

Your uploaded CV: 90 days from upload. The file you uploaded, and the text we took out of it, are removed 90 days after you upload them. This happens automatically, every day, for everyone, and holding a package does not extend it.

A document we generated for you: 90 days from the day it was generated. An optimised or tailored CV stays available to you for its own 90 days, which start when that document was made. So a document generated shortly before your uploaded file is removed remains available to you after that file has gone. When its own 90 days end, it is removed too.

The CV file is deleted permanently with no backup copy, and related records may remain in encrypted daily backups for up to 7 days before being overwritten.

Some records are kept longer, and we do not promise a fixed deletion period for them: usage records, records used to apply usage limits and protect the service, and your email address as your account.

Payment records are separate, and are kept for seven years. Records of purchases, payments, invoices and refunds are kept for seven years after the end of the relevant tax period, or longer where the law requires it. These records exist because tax and accounting law requires them. They contain the purchase and nothing from your CV, and they never contain your full card details, which stay with Stripe.

The seven-year period applies to those financial records only. It does not extend how long we keep your CV, the text taken from it, or any document we generated for you. Those follow the 90-day periods above.

Want your data deleted sooner? Email hello@updatemycv.com to ask us. We delete the records we can reliably identify as yours, and we may need information that helps us find them, such as the email address on your account. Some records may not be identifiable from an email address alone, for example those from a visit where no address was given. We keep the record of a payment where the law requires us to, and that record does not contain your CV.

Analytics

We measure how many people visit and which pages they use, so we know whether the product is helping anyone. This is about pages, not about you: we do not build a profile of you, and we never connect analytics to your CV or your results.

Analytics run on our public pages only. They are deliberately switched off on the screens that show your CV, your score, your job match and your optimised CV. No measurement tool of any kind loads on those pages, so nothing outside our own servers can see what is on them.

We use a privacy-first analytics tool that counts page views without cookies and without tracking you across other websites, and Google Analytics on those same public pages, to understand which campaigns bring people here. Google Signals and advertising personalisation are switched off, so your visit is not used to build an advertising profile of you.

What Google Analytics receives includes the page address, where you arrived from, your device type and your approximate location. It never receives your CV, your name, your email address, a file name, or anything from your score, your job match or your optimised CV.

Your choices

• Use the free assessment without ever giving an email address.
• Ask us what we hold about you, including what your account holds.
• Ask us to delete it. We delete what we can identify as yours, other than payment records we are required to keep.
• Decline marketing, which we do not send. If we ever introduce it, it will be by separate consent that you give on its own.

Related policies

Terms and Conditions and Refund and Cancellation Policy.

Contact

UpdateMyCV Technologies LLC
United Arab Emirates
hello@updatemycv.com