Privacy Policy

Last updated: 21 August 2026

Who we are

Calibre CV ("Calibre", "we", "us", "our") is a CV analysis platform operating at calibrecv.co.uk. We are based in the United Kingdom. You can contact us at calibrecvhp@gmail.com.

What data we collect

When you use Calibre, we may collect and process the following information:

• CV files: documents you upload for analysis (PDF, image, or text format)
• Account information: if you sign in with Google, we receive your name, email address, and a Google account identifier
• Score history: your overall score, section breakdown, target, and the one-way file fingerprint described below, for each analysis you run while signed in. We never store the CV itself, only these numbers and that fingerprint
• SQE1 practice progress: bookmarked questions and answer history, for Calibre Plus subscribers using the SQE1 practice tool
• Payment information: handled entirely by Stripe. We never see or store your card details
• Usage data: basic server logs (IP address, request timestamps) generated automatically by our hosting provider (Render), and privacy-friendly site analytics (see below)
• Contact form submissions: your name, email, and message if you contact us through the site
• A one-way content fingerprint: a cryptographic hash of your CV file. It does two jobs. It recognises an identical resubmission, so we can return the same result without re-processing it. Kept with your score history, it also lets us tell one CV reworked many times apart from many different people's CVs going through a single account, which our terms do not allow. This fingerprint cannot be reversed to reconstruct your CV, and changing even a single character in the file produces a completely different, unrelated fingerprint. It only matches a byte-for-byte identical file, never a similar one

How we use your data

Your CV is used solely to generate your analysis via the Anthropic Claude API. It is:

• Sent to the Anthropic API for processing
• Deleted from our servers immediately after analysis is complete
• Never stored, shared, or used for any other purpose

The only exception is the one-way content fingerprint described above: before running a new analysis, we check whether that exact fingerprint has been analysed before against the same target. If it has, we return the same result instead of processing the file again. This only ever happens for a byte-for-byte identical file; any edit to the CV, however small, produces a different fingerprint and a fresh analysis. We still do not see, store, or have access to the CV itself at any point in this check.

The same fingerprint is also saved with your score history, against your account, so that we can tell heavy use of your own CV apart from an account being shared or used to check other people's CVs. It is compared only against other fingerprints on your own account, never across accounts to identify anyone, and it still cannot be reversed to recover any part of a CV.

We do not build advertising profiles or share your data with third parties for marketing. Your Google account details are used only to identify your account, enforce plan limits, and (if you have not opted out) send you transactional emails about your account: analysis results, subscription welcome emails, and similar. We may also use account activity to detect and prevent abuse of the service, such as automated or bot-driven usage inconsistent with genuine individual use, see the "Suspension and termination" section of our Terms of Service.

Third-party services

Calibre uses the following third-party services:

• Anthropic: AI analysis of your CV. Subject to Anthropic's Privacy Policy
• Google: sign-in. Subject to Google's Privacy Policy
• Stripe: payment processing. Subject to Stripe's Privacy Policy
• Resend: delivery of transactional emails (analysis results, subscription and welcome emails). Subject to Resend's Privacy Policy
• Supabase: our database, storing the account and score-history data described above. Subject to Supabase's Privacy Policy
• Render: server hosting. Basic access logs are retained by Render

Cookies and local storage

We do not use cookies or advertising/third-party tracking. We use browser local storage to keep you signed in and to cache your subscription status on your device, so the site does not need to re-check the server on every page. Local storage also holds your in-progress attempt and best scores for the free assessment practice tools, kept on your device only. None of this tracks you across other sites.

Site analytics

We run simple, privacy-friendly analytics to understand how the site is used: page visited, referring site, and a daily-rotating anonymised visitor identifier derived from your IP address and browser. This identifier changes every day and cannot be used to identify you personally or linked back to your account. We do not use Google Analytics, advertising cookies, or any third-party tracking network.

Our lawful basis for processing

Under UK GDPR we rely on the following bases:

• Performance of a contract: processing your CV to produce the analysis you asked for, managing your account, and taking payment
• Legitimate interests: keeping the service secure and preventing abuse, understanding aggregate site usage, and sending transactional emails about your account. We have considered these against your rights and use the least intrusive method we reasonably can
• Legal obligation: retaining payment and tax records where the law requires it

For the purposes of UK GDPR, Calibre is the data controller for the personal data described above.

Your rights (UK GDPR)

As a UK resident, you have the right to:

• Access any personal data we hold about you
• Request deletion of your data
• Object to processing of your data

We do not retain CV files after analysis, so the personal data we hold beyond server logs is limited to your account details (name, email, Google identifier), your score history, and SQE1 practice progress if applicable. To access or delete this data, email us at calibrecvhp@gmail.com.

Data retention

CV files are deleted immediately after analysis. Score history, account details, and SQE1 practice progress are retained for as long as your account is active, or until you request deletion. Content fingerprints and their cached results are not linked to your identity and are retained indefinitely to keep working for future identical resubmissions, from anyone; email us if you would like a fingerprint cleared. Server logs are retained by our hosting provider for up to 30 days. Analytics visitor identifiers rotate daily and are not linked to individual accounts. Payment records are retained by Stripe in accordance with their policies and applicable law.

Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect any changes. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related questions, contact us at calibrecvhp@gmail.com.