legal
Privacy policy
Last updated: May 21, 2026
glowmycv ("we", "us") provides a paid CV review service. This policy explains what we collect, why, who we share it with, how long we keep it, and how to ask us to delete it. Plain language, no dark patterns.
What we collect
- The CV you upload (PDF or DOCX, up to 10 MB).
- Your email address so we can send the review back.
- The brief you write (what role you're targeting, what to emphasize).
- The target role and company you specify.
- Standard request metadata — IP address, user-agent, timestamps — recorded by our hosting provider for security and reliability.
Why we collect it
We use this data only to provide the review service.
- The CV is read by our reviewer, who marks it up and writes the review email.
- The brief informs how she edits — what to lead with, what to bury.
- Your email is the delivery address for the review and follow-ups.
- Request metadata helps us detect abuse and debug failures.
Who we share with (subprocessors)
- Vercel — hosting and private blob storage. Your CV is encrypted at rest in Vercel's US region. Vercel privacy policy.
- Clerk — authentication for the reviewer's dashboard. Customers don't touch Clerk; only the reviewer signs in. Clerk privacy policy.
- Resend — transactional email. Sends the upload notification to our reviewer and the review email to you. Resend privacy policy.
- AI tools (Anthropic Claude / OpenAI). Our reviewer may use AI assistants during her review. When she does, relevant CV snippets are sent to the AI provider with training opt-out enabled.
We do not sell or share your data with advertisers or marketing partners. We do not run analytics that profile you.
How long we keep it
30 days from upload, maximum. A scheduled job deletes both the file and the metadata sidecar at the 30-day mark. You can ask us to delete sooner — see delete my data.
Cookies
We use a small number of strictly functional cookies.
- Reviewer session cookie set by Clerk on /reviewer routes.
- A cookie storing your cookie-consent preference.
We do not use any analytics, advertising, or cross-site tracking cookies.
Your rights (GDPR / CCPA / etc.)
You can:
- Access the data we hold about you.
- Request deletion. See delete my data for the process.
- Object to processing.
- Export your data.
To exercise any of these, email hi@glowmycv.com. We'll respond within 30 days.
Children
We don't knowingly accept CVs from children under 16. If you believe we hold data on a minor, email hi@glowmycv.com and we'll delete it within 24 hours.
Security
Files are encrypted at rest. Access to the reviewer dashboard requires Google sign-in and an explicit reviewer-email allow-list. Uploads are validated server-side for safety (file type, size, embedded scripts, macros) before storage.
Changes
We'll update the date at the top of this page and notify recent customers by email for material changes.