GDPR & Data Rights

MYCV is the data controller for personal data processed through the Service. For privacy or data requests, contact our privacy team at privacy@mycv.au. If we appoint an EU/UK representative or Data Protection Officer, their details will be published here.

• CV content you upload or paste — name, contact details, employment history, education, and skills. Avoid including special-category data (e.g. health, religion, political views); if you do, you consent to us processing it to deliver the Service.
• Account data — email, name, and (for Google sign-in) your profile picture, via our authentication provider.
• Usage and technical data — basic, largely anonymized analytics and security logs.

• Performance of a contract — to provide the CV generation, tailoring, sharing, and export features you request.
• Consent — for processing the content you voluntarily submit (including any special-category data) and for optional features. You may withdraw consent at any time.
• Legitimate interests — to secure, maintain, and improve the Service, where not overridden by your rights.
• Legal obligation — to comply with applicable law.

We share personal data only with service providers who process it on our behalf under contract, including our AI provider (OpenAI) to generate your output, our authentication provider, hosting and infrastructure providers, and our payment processor. We do not sell your personal data.

Some providers may process data outside your country, including in the United States. Where required, such transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or an adequacy decision.

We keep personal data only for as long as necessary to provide the Service and for legitimate or legal purposes, after which it is deleted or anonymized. You can request deletion at any time (see below).

• Access — obtain a copy of your personal data;
• Rectification — correct inaccurate or incomplete data;
• Erasure — request deletion (“right to be forgotten”);
• Restriction — limit how we process your data;
• Portability — receive your data in a portable, machine-readable format;
• Objection — object to processing based on legitimate interests;
• Withdraw consent — at any time, without affecting prior lawful processing;
• Automated decisions — not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. MYCV does not make such decisions about you; our AI assists you and you remain in control of the output.
• Complain — lodge a complaint with your supervisory authority (e.g. your EU Data Protection Authority, the UK ICO, or the Australian OAIC).

California residents have the right to know what personal information we collect and how it is used and shared, to request deletion or correction, and to not be discriminated against for exercising these rights. We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined under the CPRA.

For users in Australia, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the APPs, including being open about our practices, collecting only what we need, keeping it secure, and giving you access to and correction of your information. Complaints can be made to the Office of the Australian Information Commissioner (OAIC).

Email privacy@mycv.au from the address associated with your account. We will verify your identity and respond within the timeframe required by applicable law (generally within one month under the GDPR). There is normally no charge, and you may ask someone to make a request on your behalf.

We may update this page to reflect changes in law or our practices. The date above shows the latest revision. Questions? Contact privacy@mycv.au.