Privacy Policy

1. Who we are

thecvdrop.com is operated by Micromedia Ltd, registered in England and Wales (company number: [Company Registration Number]), with a registered address at 60 Cavendish Street, Keighley, BD21 3RL, United Kingdom. For any privacy question or to exercise the rights described below, contact us at micromediauk@gmail.com.

2. What we collect

When you use thecvdrop.com, we collect:

• Account data — your email address and password (stored as a salted hash, never in plain text).
• CV content — the PDF or Word document you upload, and the structured data (work history, skills, education, contact details) we extract from it using AI.
• Employer data — company name, website, and job postings, if you register as an employer.
• Usage data — job applications, saved searches, and match results, so the product can function.
• Technical data — IP address and basic request logs, kept briefly for security and abuse prevention.

3. How we use it

We use your data to:

• Parse your CV and generate semantic embeddings that power job matching (via Anthropic's Claude and Voyage AI's embedding models — see section 5).
• Show you ranked job matches and let you apply to roles.
• Let employers review applications to their own job postings.
• Send transactional emails you request, such as password resets.
• Keep the platform secure and investigate abuse.

We do not sell your personal data.

4. Legal basis (UK/EU users)

For candidates and employers in the UK and EU, we process your data under the legal bases of contract (to provide the matching service you signed up for) and legitimate interest (platform security, abuse prevention). Where we rely on consent — for example, non-essential cookies — you can withdraw it at any time.

5. Third parties we use

We share data with a small number of processors strictly to run the service:

• Anthropic (Claude) — receives your CV text to extract structured fields. See Anthropic's privacy policy.
• Voyage AI (a MongoDB company) — receives CV and job text to generate the embeddings used for matching. See MongoDB's privacy policy.
• Resend — sends transactional emails (e.g. password resets) on our behalf.
• Our hosting provider, for infrastructure only — they do not access your data for their own purposes.

We do not use these providers to train their general-purpose models on your data beyond what each provider's own policy discloses.

6. Advertising

Some pages may display a paid, clearly-labelled advertisement from a third party (currently, a legal services banner linking to an external site). Clicking it takes you to that advertiser's own site, which has its own privacy policy — we don't share your account data with advertisers.

7. How long we keep your data

We keep your account and CV data for as long as your account is active. If you delete your account, we delete your CV files and personal profile data within [30] days, except where we're required to retain limited records for legal or security reasons.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email micromediauk@gmail.com. UK/EU users also have the right to complain to their local data protection authority (in the UK, the ICO).

9. Cookies

We use a minimal set of essential cookies/local storage required to keep you signed in. We don't currently use analytics or advertising cookies; if that changes, we'll update this policy and the cookie banner accordingly.

10. Changes to this policy

We'll update the "last updated" date above if this policy changes materially, and where required by law, notify registered users directly.