Privacy Notice

1. Who we are

CV Scores is operated by RBS Solutions S.à r.l.-S ("we", "us"). We are the data controller for the personal data processed through this Service, meaning we determine how and why your data is processed.

2. Data we collect

• Account data — email address, login credentials (hashed), authentication identifiers.
• CV content — the CV file or text you upload, and the analysis report generated from it.
• Support messages — correspondence you send us.
• Usage and technical data — device identifiers, IP address, browser type, and basic telemetry used to operate and secure the Service.

Payment details are collected and processed directly by Paddle (our Merchant of Record); we do not receive or store your card numbers.

3. Why we process it (purposes and legal basis)

• Providing the Service — analysing your CV and delivering your report (performance of a contract).
• Account creation and management (performance of a contract).
• Security and fraud prevention (legitimate interests).
• Product improvement — aggregated, de-identified usage analysis (legitimate interests).
• Customer support (performance of a contract / legitimate interests).
• Legal obligations — records we must keep for tax or regulatory reasons (legal obligation).
• Marketing — only with your consent where required.

4. Who we share data with

• Service providers / subprocessors — cloud hosting and database infrastructure, analytics, and support tooling, each under appropriate data-processing terms.
• AI processing providers — your CV text is processed by an AI model provider solely to generate your analysis.
• Paddle (Merchant of Record) — for the sale of the product, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law.

5. Retention

We keep your data only as long as needed to provide the Service and meet legal obligations. Your CVs and reports remain available in your account history until you delete them or delete your account. You can request deletion of your CVs and reports at any time, and we will delete or anonymise data that is no longer needed.

6. Your rights

Depending on your country of residence, you may have the right to access, rectify, erase, restrict or port your personal data, to object to processing, and to withdraw consent at any time. If you are in the UK or EEA, you also have the right to lodge a complaint with your supervisory authority; we respond to verified requests within one month. To exercise any right, contact us via the support email on our website.

7. International transfers

Some of our service providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

8. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit and at rest and access controls that limit who can view user content.

9. Cookies

We use essential cookies required for sign-in and security. We do not use marketing or third-party advertising cookies. You can manage cookies through your browser settings; blocking essential cookies may prevent sign-in from working.

10. Changes

We may update this notice from time to time and will post the revised version here with an updated date. See also our Terms & Conditions.