Privacy Policy

Welcome to LiftmyCV! LiftmyCV is owned and operated by Fortunestack LTD. These are the terms and conditions for:

• LiftmyCV web application https://app.liftmycv.com/
• LiftmyCV website https://www.liftmycv.com/
• LiftmyCV Google Chrome Extension

Will be under the responsibility and in charge of:

• Fortunestack LTD – LiftmyCV
• Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
• Email: [email protected]

When you visit the website, register as a user on the web application, install the LiftmyCV Google Chrome extension, provide your CV and create a profile, purchase a Lifts package, use the functionalities available on the platform, report a bug or request improvements, and contact us via our contact information, you consent to our collection, storage and use of your information under the terms set out in this privacy policy.

The information you provide through your use of LiftmyCV helps us to provide the functionalities available on the platform and to continuously improve the user experience on the platform. It is important to note that this information is shared with third-party job search websites when performing automations (Lifts), such as: www.linkedin.com, lever.co, greenhouse.io, workable.com, glassdoor.com, monster.com, breezy.hr, www.ashbyhq.com, recruitee.com, wellfound.com, etc. These third-party websites require you to fill in this information in order to submit your job application. Therefore, LiftmyCV will automatically fill in the application forms to assist the candidate. In addition, we share this data with ChatGPT (OpenAI) to automate the completion of the application forms and to help the candidate tailor the cover letter, achievements and other important information for the job search (see section 6). These are the types of information we collect and that you may provide through your use of LiftmyCV:

Information you provide through the use of LiftmyCV. You provide information when you visit the website, register as a user on the web application, install the LiftmyCV Google Chrome extension, provide your CV and create a profile, purchase a Lifts package, use the functionalities available on the platform, report a bug or request improvements, and contact us through our contact information. As a result of those actions, you may provide us with the following information:

• CV (resume)
• First and last name
• Email
• Phone number
• Linkedin account
• X (Twitter) account
• Website URL
• GitHub URL
• Residency (including: street, building no, apartment no, country, city, zip code)
• Authorisation to work in countries
• Visa sponsorship requirements
• Relocation requirements
• Years of working experience
• Past and current companies (including: company name, title, start date, end date, responsibilities)
• Education (including: school, degree, field of study, start date, end date)
• Courses & certificates (including: school, degree, field of study, start date, end date)
• Languages (including: language name, proficiency)
• Skills, general information (including: expected annual salary, current annual salary, notice period, expected date to start, race/ethnicity, disability, veteran status, achievements, cover letter, recommendation letters).

Usage Data (website): As you browse our website, certain usage data is automatically collected. These include technical information such as the IP address of your device, the type and version of your browser, the specific pages you visit on our website, the date and time of your access, the amount of time you spend on those pages, and other diagnostically relevant data. In the case of access via mobile devices, we also collect information specific to these devices. This may include, but is not limited to, the type of mobile device used, its unique identifier, the IP address of the device, the mobile operating system and the type of mobile browser, along with other identifiers and diagnostic data. In addition, we collect information that your browser automatically provides each time you visit our website or access our website using a mobile device.

Registration and login: we offer our users the option to register and login to their account using their Google credentials. By using this feature, users allow LiftmyCV to access certain information from their Google account, such as name, email address and profile picture, to facilitate the registration and login process. This information is used exclusively to authenticate the user and provide access to our services.

LiftmyCV does not store Google account passwords, as authentication is handled through Google’s servers. By opting for this form of registration and login, users should be aware that Google’s privacy terms and policies apply in addition to ours. LiftmyCV is committed to protecting the privacy of its users’ data and will use the information collected only for the purposes specified, in accordance with our Privacy Policy.

Users have the option to remove and unlink their Google account from LiftmyCV at any time by sending us a request via email. LiftmyCV will then proceed to manually remove the account from our database. In addition, it is the user’s responsibility to ensure that their Google account is secure and that they do not share their credentials with third parties. For more information on how we handle your personal data, please see our full Privacy Policy. See Google’s privacy policy here: https://policies.google.com/privacy/

Payment Data: Payment data refers to information related to your credit or debit card, such as card number, expiration date, security code, etc., depending on the payment method selected by the user to place an order within the website.

Your payment details will be processed by the payment processors available on this platform (Stripe), who will process and store your details securely and solely for the purpose of processing the purchase of Lifts packages. LiftmyCV reserves the right to contract any payment processor available. View Stripe’s privacy policy here: https://stripe.com/privacy/

Contact information: We may access some personal information about the user, such as name and email address, when the user or any third party communicates with us through our contact information. Personal information provided through our contact information is not stored on any LiftmyCV server and will be stored on the respective server of our email service.

Personal data provided by users through the platform will be retained for the time necessary to provide the functionalities available on the platform, to fulfil the legitimate purposes described in section 5 of this policy or until the user closes the user account, or requests deletion of their data. LiftmyCV may retain personal data for a longer period provided that the user has consented to such processing, as long as such consent is not withdrawn. In addition, LiftmyCV may be obliged to retain personal data for a longer period provided that this is required for compliance with a legal obligation or by order of an authority. Once the retention period has expired, the personal data will be deleted. Therefore, the right of access, the right of deletion, the right of rectification and the right to data portability cannot be asserted after the retention period has expired.

In general, we use the information we collect primarily to provide, maintain, protect and improve our platform and to provide the functionalities available on the platform appropriately. We use personal information collected through our platform as described below:

• Facilitate the download of our Google Chrome extension.
• Facilitate the registration of our users in the web application.
• Facilitate the uploading of CVs and the creation of user profiles.
• Provide our Lifts packages.
• Process payment of Lifts packages.
• Provide our Lifts according to the profile and CV of our users.
• Provide the functionalities available on the platform.
• Process bug reports and improvement requests.
• Understand and improve your experience using our platform.
• Respond to your comments or questions through our support team.
• Send you related information, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages.
• Send you notifications and relevant information about LiftmyCV.
• LiftmyCV marketing purposes.
• Process user requests related to the exercise of their rights over their personal data.
• Link or combine your information with other data we obtain from third parties to help us understand your needs and provide you with better service.
• Protect, investigate and deter fraudulent, unauthorised or illegal activities.

When users enable the “Stealth Apply” feature, LiftmyCV processes their profile data and uploaded resumes to automatically apply to relevant job openings on their behalf. This processing is based on explicit user consent given at activation and can be disabled at any time through account settings. LiftmyCV does not use this information for any other purpose beyond job application automation.

Information about our users is an important part of our business, and we are not in the business of selling it to third parties. We share customer information only as described below.

Third-party suppliers. We use third party services to perform certain functions on our platform. Some of these functions and services include:

• OpenAI and ChatGPT: We use OpenAI Chat services, including the ChatGPT API, to automate certain processes, such as filling out job applications and auto-completing fields in the user’s profile, such as achievements and cover letters. When interacting with these services, we share user profile information, which may include: full name, email address, phone number, social media links, residence, work authorisation, work experience, education, certifications, skills, salary expectations, and other information relevant to the user’s professional profile. This data is analysed and stored by OpenAI to improve the accuracy and quality of the answers generated. For more information, see OpenAI’s privacy policy here: https://openai.com/policies/privacy-policy/
• We also use OpenAI’s API to generate personalised resumes or application materials based on the information users provide in their profile. These generated materials may include rephrased descriptions of experience, skills, and achievements. LiftmyCV processes and stores such data solely for the purpose of assisting users in their job search and does not use it for any other purpose. This processing occurs only after explicit consent is provided by enabling the respective feature.
• For the purposes of the GDPR, OpenAI acts as a data processor handling information on behalf of LiftmyCV.
• Google Accounts API: Users have the option to register or log in to LiftmyCV using their Google Accounts. This process allows Google to collect information such as name, email address and profile picture, to facilitate user authentication. This data is managed by Google in accordance with its privacy policies, which can be consulted here: https://policies.google.com/privacy/
• Stripe: For payment processing, LiftmyCV uses Stripe, a payment service provider that handles transactions in multiple currencies. Stripe processes data such as credit and debit card information, as well as bank account details. Stripe complies with PCI/DSS security standards to ensure the protection of users’ financial data. See Stripe’s privacy policy for more details: https://stripe.com/privacy/
• LinkedIn: Users can use the “Connect with LinkedIn” option available in the user profile. This function allows the automatic import of data from LinkedIn to facilitate the creation of the user profile in LiftmyCV. LiftmyCV may collect the following information from LinkedIn:
• ○ CV (resume)
• ○ First and last name
• ○ Email
• ○ Phone number
• ○ Linkedin account
• ○ X (Twitter) account
• ○ Website URL
• ○ GitHub URL
• ○ Residency (including: street, building no, apartment no, country, city, zip code)
• ○ Authorisation to work in countries
• ○ Visa sponsorship requirements
• ○ Relocation requirements
• ○ Years of working experience
• ○ Past and current companies (including: company name, title, start date, end date, responsibilities)
• ○ Education (including: school, degree, field of study, start date, end date)
• ○ Courses & certificates (including: school, degree, field of study, start date, end date)
• ○ Languages (including: language name, proficiency)
• ○ Skills, general information (including: expected annual salary, current annual salary, notice period (days), expected date to start, race/ethnicity, disability, veteran status, achievements, cover letter, recommendation letters).

To learn more about LinkedIn’s data practices, please visit their privacy policy: https://www.linkedin.com/legal/privacy-policy/

• Google Analytics: We use Google Analytics to analyse website traffic and improve the user experience. Google Analytics collects anonymised data to help us better understand how our services are used. Please see Google’s privacy policy for more information:  https://policies.google.com/privacy/
• Google Tag Manager and Google Looker Studio: These tools allow us to manage marketing tags and visualise data to improve the user experience and optimise our marketing strategies. More details on Google’s data practices can be found in their privacy policies:  https://policies.google.com/privacy/
• Sendpulse: To keep our users informed about news and updates, we use Sendpulse to send newsletters. We share data such as names and email addresses with Sendpulse, who use them exclusively for the distribution of these newsletters. Users may opt-out at any time. See Sendpulse’s privacy policy here: https://sendpulse.com/legal/pp/
• Drift: We offer support through an online chat provided by Drift, which may require contact information such as email address and name. Drift may send notifications outside of our platform to keep users informed of responses and updates. More information on how Drift handles personal data can be found in Drift’s privacy policy: https://www.drift.com/privacy-policy/
• Canny: We use Canny to collect feedback and suggestions from our users. Canny may request and use email addresses and names to communicate updates and respond to user feedback. For more details on how Canny handles personal data, please refer to Canny’s privacy policy. https://canny.io/privacy/
• Meta Pixel (Facebook/Instagram): We use the Meta Pixel (formerly Facebook Pixel) to collect information about user interactions on our website, such as page views, clicks, and conversion events. This helps us measure the effectiveness of our marketing campaigns on Facebook and Instagram and improve our advertising. The Meta Pixel may collect data such as your IP address, browser type, and the pages you visit on our platform. This information is processed by Meta Platforms, Inc. in accordance with their privacy policy: https://www.facebook.com/privacy/policy/. No personal data (such as name or email) is intentionally shared with Meta through the pixel unless explicitly configured. We do not post or share anything on your Facebook or Instagram accounts.
• LinkedIn Insight Tag: We use the LinkedIn Insight Tag to collect data about visitors to our website, including URL, referrer, IP address, device and browser characteristics, and timestamp. This data helps us better understand our audience and measure the effectiveness of our LinkedIn advertising campaigns. The LinkedIn Insight Tag allows us to track conversions, retarget website visitors, and gain deeper insights into user behavior. The information collected is processed by LinkedIn in accordance with their privacy policy: https://www.linkedin.com/legal/privacy-policy/. No personally identifiable information is shared directly with LinkedIn unless explicitly configured. You can opt out of LinkedIn’s use of cookies for personalized ads by adjusting your LinkedIn account settings.
• X (Twitter) Pixel: We use the X (formerly Twitter) Conversion Tracking Tag to measure the effectiveness of our Twitter advertising campaigns and to retarget users who have visited our website. The pixel collects information such as IP address, browser type, device type, pages visited, and conversion events. This helps us deliver more relevant ads on the X platform and analyze user interactions on our website. The data collected through the X Pixel is processed according to X’s privacy policy: https://twitter.com/en/privacy/. No personally identifiable information is intentionally shared with X unless explicitly configured. You can manage your data privacy settings by adjusting your preferences within your X account.
• Contentsquare and Hotjar (UX Analytics): We use Contentsquare and Hotjar to analyze user behavior on our website and improve user experience (UX). These tools may collect anonymized data such as mouse movements, clicks, scrolls, session durations, page views, and device/browser information. Both platforms have built-in privacy measures and automatically mask sensitive data such as passwords, payment fields, or personal inputs during session recordings and heatmap analysis. Data collected is anonymized, aggregated, and used solely for usability analysis. Contentsquare Privacy Policy Hotjar Privacy Policy

These third-party services and tools may have access to personal information needed to perform their functions, but may not use that information for other purposes. Information shared with these third-party services will be treated and stored in accordance with their respective privacy policies and our privacy policy.

Employers, recruiters, job portals: By providing your resume or CV and contact details on LiftmyCV, you consent to this information being shared with selected third parties through automations known as “Lifts”. These automations are designed to facilitate the stream of your information to employers and recruitment agencies for the sole and exclusive purpose of considering your application for relevant job opportunities.

Third parties who receive your CV (resume) and contact information through LiftmyCV’s automation are authorised to use this information in accordance with their own privacy policy. This includes reviewing your profile, assessing your suitability for potential job vacancies, contacting you to progress recruitment processes and sending you relevant communications. Please note that the use, processing and storage of your data by these third parties is done under their own privacy policies and responsibility, as LiftmyCV is not responsible for how and where this data will be stored.

Although LiftmyCV implements measures to ensure that only third parties that meet high standards of privacy and security receive your information, it is important to understand that, once shared through Lifts, the handling of your data will be subject to the privacy policies of those third parties. We recommend that you familiarize yourself with these policies when you receive communication from such third parties.

You are responsible for ensuring that the information provided to LiftmyCV, including CV and contact details, is up to date and accurate. Any inaccuracies in the data could affect the effectiveness of the automations and the selection process.

By continuing to use LiftmyCV and agreeing to Lifts sharing your information, you acknowledge and agree that your CV and contact information may be transmitted to various third party websites (LinkedIn, Monster, Wellfound, Workable, Lever, Ashby, Recruitee, Greenhouse, Glassdoor, and more), when performing the automations (Lifts) and providing the functionalities available on LiftmyCV. If at any time you decide that you do not want your information to be shared through Lifts, you can close your account and stop using the platform. In the event that information has already been transferred to a third party, this information will be processed in accordance with that third party’s privacy policy. Any requests regarding information shared and processed to third parties should be made directly with the third party.

Communications and newsletters. By providing us with your email address and contact details through the use of our platform, you consent and agree that we may send you relevant content, notifications and information to your email address. Therefore, your email address may be shared with third party bulk email services for the sole and exclusive purpose of sending you relevant communications from LiftmyCV. You also acknowledge and authorise that various third party websites (www.linkedin.com, lever.co, greenhouse.io, workable.com, glassdoor.com, monster.com, indeed.com, dice.com, ziprecruiter.com, simplyhired.com, etc.) to which your contact information may be shared through Lifts, may send you communications, newsletters, job postings and relevant information through your contact information. If you wish to stop receiving communications from LiftmyCV, you can unsubscribe at any time by using the “unsubscribe” option available in the same emails from LiftmyCV or by sending your request through our contact information. In the case of third party websites, users should consult how to unsubscribe from those websites and their newsletters.

Business Transfers. In the event LiftmyCV creates, merges with, or is acquired by another entity, your information will likely be transferred. LiftmyCV will send you an email or post a prominent notice on our platform before your information becomes subject to another privacy policy.

Protection of LiftmyCV and Others. We release personal information when we believe release is appropriate to comply with the law, enforce or apply our terms and conditions and other agreements, or protect the rights, property, or safety of LiftmyCV, our users, or others. This includes exchanging information with other companies and organisations for fraud protection and credit risk reduction.

Anonymous Information. LiftmyCV uses anonymous browsing information collected automatically by our servers primarily to help us administer and improve the platform. We may also use aggregated anonymous information to provide information about the platform to potential business partners and other unaffiliated entities. This information is not personally identifiable.

Email-based verification for certain job platforms. For specific job platforms (such as Greenhouse.io) that require email-based verification, LiftmyCV’s automation may open your Gmail inbox (logged in as your profile email) via a secure direct link to locate and open the verification email containing the required code. This process uses a targeted search query and does not access, read, or store any other emails or inbox content. You will be prompted to enable or disable this feature the first time you use Greenhouse auto-apply, and you can change this setting at any time in your account settings.

LiftmyCV uses AI services solely to assist users in their job search. Users acknowledge that AI-generated content may contain inaccuracies or inconsistencies. LiftmyCV does not assume liability for the accuracy of AI-generated materials.

7. DATA BREACH NOTIFICATIONS

In the event of a security breach that compromises the confidentiality of the personal data of our users, LiftmyCV undertakes to notify those affected in a timely manner. This notification will be made through the means of contact that have been provided by the user on our platform. We will take all reasonable measures to protect the information and remedy any situation that compromises the security of your data.

By using our platform, you agree that your personal data may be transferred and processed outside the UK, where data protection laws may be different. This is because the data may be stored on servers located outside your country. LiftmyCV is committed to taking the necessary steps to ensure that your data is treated in accordance with applicable privacy standards and is adequately protected during any international transfer.

We grant access to your personal information only to those outside persons or services that have a legitimate need to know it and in accordance with our privacy policy. We adhere to industry-recognised security standards to protect your personal information, both during transmission and in storage. However, it is important to note that no method of transmission over the Internet or electronic storage is foolproof and 100% secure. Therefore, while we at LiftmyCV strive to implement commercially viable data protection methods, we cannot ensure absolute security of your personal information. We undertake not to sell, distribute or transfer your personal data to unauthorised third parties, unless we have your explicit consent or are required by law to do so.

Users who provide information through our platform, as data subjects, have the right to access, rectify, download or delete their information, as well as to restrict and oppose certain processing of their information. While some of these rights apply generally, others only apply in certain limited circumstances. These rights are described below:

• Access and portability: to access and know what information is stored on our servers, you can send us your request through our contact information.
• Rectification, restriction, limitation and deletion: You may also rectify, restrict, limit or delete much of your information.
• Right to be informed: Users of our platform will be informed, upon request, about what data we collect, how it is used, how long it is kept and whether it is shared with third parties.
• Object: Where we process your data based on our legitimate interests, as explained above, or in the public interest, you may object to this processing in certain circumstances. In such cases, we will stop processing your information unless we have legitimate grounds to continue processing it or where necessary for legal reasons.
• Withdraw consent: Where you have previously given your consent, for example to allow us to process and store your personal information, you have the right to withdraw your consent to the processing and storage of your information at any time. For example, you can withdraw your consent by updating your settings. In certain cases, we may continue to process your information after you have withdrawn your consent if we have a lawful basis for doing so or if your withdrawal of consent was limited to certain processing activities.
• Complaint: If you wish to lodge a complaint about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority. Users may exercise all of these rights by contacting us via the contact information or contact page.
• Rights related to automated decision-making, including profiling: Users may request that we provide them with a copy of the automated processing activities we conduct if they believe that data is being unlawfully processed.

Users or holders of personal data provided through the platform may exercise these rights over their personal data at any time and without limitation by sending their request through our contact information. The request to exercise their rights will be attended and answered within a maximum period of 10 working days.

We are committed to ensuring that our users maintain full control over their data. Therefore, we grant users the explicit right to modify or delete any information they have provided to the platform.

Users can exercise this right directly through their user account by facilitating the editing or deletion of their data. In the event that certain requests cannot be handled through the user account, users may contact us through our contact information to make the necessary edits or deletions.

Our approach is designed to ensure that users have constant and effective control over their data, allowing them to manage their information in a way that protects their privacy and autonomy.

We comply with national and international data protection regulations regarding the protection of children’s personal data. We do not collect any information from children under the age of 13. If we become aware that a child under the age of 13 has provided us with personal information, we will take immediate steps to delete such information.

Except as expressly included in this privacy policy, this document addresses only the use and disclosure of information LiftmyCV collects from you. If you disclose your information to others, whether other users or LiftmyCV vendors, different rules may apply to their use or disclosure of the information you disclose to them. LiftmyCV does not control the privacy policies of third parties, and you are subject to the privacy policies of those third parties where applicable. LiftmyCV is not responsible for the privacy or security practices of another Internet platform, including those linked to or from the LiftmyCV platform. Please review the privacy policies of third-party websites or services that you access through the LiftmyCV platform.

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your personal data may be transferred to the acquiring entity or successor as part of that transaction.

We reserve the right to change our privacy policy at any time. Changes will be promptly notified to our users and posted on the website. Your continued use of our website and services following these changes constitutes acceptance of the changes.

If you have questions or concerns about this privacy policy and the treatment and security of your data, please contact us through our contact forms or by using the following contact information:

• Fortunestack LTD – LiftmyCV
• Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
• Email: [email protected]