Privacy Policy
Last updated: 5 July 2026
This Privacy Policy explains how InquoCV Ltd, a company registered in England and Wales under company number 17322210 (“InquoCV”, “we”, “us”, or “our”), collects, uses, shares, and protects your personal information when you use InquoCV, including our website and related services (the “Service”). We are the data controller responsible for your personal information.
We take your privacy seriously and only collect what we need to provide the Service. Please read this policy together with our Terms of Use. If you do not agree with it, please do not use the Service.
We handle your personal information in line with the core data-protection principles of the UK and EU GDPR:
- Lawfulness, fairness & transparency — we process your data only where the law allows, and we tell you clearly how and why.
- Purpose limitation — we collect your data for specific, legitimate purposes and do not use it in ways incompatible with those purposes.
- Data minimisation — we collect only the information we genuinely need to provide the Service.
- Accuracy — we let you review, correct, and update your information at any time.
- Storage limitation — we keep your data only for as long as necessary, then delete it.
We also keep your information secure and confidential, and we hold ourselves accountable for meeting these standards.
1. Who this policy applies to
This policy applies to everyone who visits our website, creates an account, or uses the Service, anywhere in the world. We have users across many countries, and data-protection laws differ from place to place. We apply recognized data-protection standards — including the UK GDPR and the EU GDPR — as our global baseline, and we also respect the rights granted by other applicable privacy laws, such as India's Digital Personal Data Protection Act and comparable laws in other regions. Wherever you are, if your local law grants you stronger or additional rights, we honor them.
2. Information we collect
We collect the following categories of information:
- Information you provide. Your name and email address when you register; your password (stored only in encrypted/hashed form and never visible to us); the resume, career history, and other content and personal details you upload or enter; the documents you generate; your settings and preferences; and any messages you send us.
- Payment information. When you buy a plan, your payment is handled by one of our resellers and Merchants of Record, Creem or Dodo Payments. The applicable reseller collects your payment and billing details directly; we do not receive or store your full card details. We receive only limited confirmation data, such as the plan purchased and a transaction reference.
- Information collected automatically. When you use the Service we automatically collect certain technical and usage data, such as your device and browser type, general activity within the Service, log data, and your IP address, from which we derive your approximate country (for example, to route you to the appropriate payment provider for your region). We also use cookies and similar technologies as described below.
3. How we use your information, and our legal bases
We use your personal information for the following purposes, relying on the legal bases shown:
- To provide and operate the Service — create and manage your account, generate and store your documents, and deliver the features you use (legal basis: performance of our contract with you).
- To process purchases — enable your payments through our resellers (Creem or Dodo Payments) and give you access to paid features (legal basis: performance of a contract).
- To keep the Service secure and prevent abuse — including detecting fraud, account sharing, and automated or abusive use (legal basis: our legitimate interests in protecting the Service and our users).
- To maintain, analyze, and improve the Service — using usage data and, where you have opted in, content, to make the product better (legal basis: our legitimate interests, or your consent where required).
- To communicate with you — send service messages such as email verification, security and account notices, and replies to your enquiries; and, only where you have agreed, product news (legal basis: contract, our legitimate interests, or your consent for marketing).
- To comply with our legal obligations — including tax, accounting, and responding to lawful requests (legal basis: compliance with a legal obligation).
4. Automated and AI processing
To create and tailor your documents, the information you provide is processed by automated systems and trusted third-party artificial-intelligence processing tools that act on our instructions. The AI provider we currently use is OpenAI (including the GPT-4o mini model). InquoCV is an independent product and is not affiliated with or endorsed by OpenAI. This processing is used solely to generate your output and deliver the Service to you. We do not use the content of your resumes or cover letters to improve or train AI systems unless you have expressly enabled the relevant option in your account settings. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.
5. Sensitive information
A resume can contain sensitive personal information (for example, details that reveal health, religion, ethnicity, or trade-union membership) if you choose to include it. We do not ask for this information and recommend you include only what is necessary for your job search. Where you choose to submit such information, you consent to us processing it for the sole purpose of providing the Service and creating your documents. You can edit or remove this content, or delete your account, at any time.
6. Cookies and similar technologies
We use cookies and similar technologies that are necessary to run the Service — for example, to keep you signed in and to maintain a secure session — and, where applicable, to remember your preferences and understand how the Service is used so we can improve it. You can control non-essential cookies through your browser settings or any cookie controls we provide; disabling essential cookies may prevent the Service from working properly.
7. How we share your information
We do not sell your personal information. We share it only as follows:
- Payment processing — with Creem and Dodo Payments, as our Merchants of Record, to take payment and meet related legal and tax obligations.
- Service providers — with trusted third parties who process data on our behalf and under our instructions to run the Service, such as providers of hosting and infrastructure, secure storage, authentication, automated content processing, analytics, and email delivery. They may use the data only to provide services to us.
- Legal and safety — where required to comply with the law, enforce our Terms, or protect the rights, safety, and security of InquoCV, our users, or others.
- Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
Third-party providers we work with
We work with the following trusted third-party providers, who may process personal information on our behalf and under our instructions to help us run the Service. Each acts only for the purpose shown, and several are located or process data outside your country (see International data transfers below).
| Provider | Purpose |
|---|---|
| Creem | Payment processing and billing (Merchant of Record) for international and other regions |
| Dodo Payments | Payment processing and billing (Merchant of Record), including UPI and local methods for India |
| Supabase | Account authentication and secure database hosting |
| Google Cloud Platform | Application hosting and processing |
| Cloudflare | File storage and content delivery |
| Vercel | Website hosting and delivery |
| OpenAI | AI-assisted text processing (e.g., GPT-4o mini) to generate and tailor your documents |
| Resend | Sending transactional emails (such as verification and account notices) |
| Zoho Campaigns | Sending optional product and marketing emails, which you can unsubscribe from at any time |
This list may change as our providers evolve; we will keep it up to date and continue to require appropriate safeguards from every provider that handles personal information for us.
8. International data transfers
We operate globally, so your personal information may be stored and processed in countries other than your own, including outside the United Kingdom and the European Economic Area, where data-protection laws may differ. Where we transfer personal information internationally, we take steps to ensure it remains protected by appropriate safeguards, such as standard contractual clauses or an adequacy decision, as required by applicable law.
9. How long we keep your information
We keep your personal information only for as long as necessary for the purposes described in this policy. Your account information is kept while your account is active. Generated document files are automatically deleted from our storage a short time after they are created. When you delete your account, it is deactivated immediately — you are signed out and can no longer sign in — and your associated personal data is then permanently deleted within 14 days. During that short window the data is retained only so we can reinstate the account if it was deleted in error and you ask us to; there is no self-service restore. After that period your data is permanently deleted, except where we are required or permitted by law to retain certain records (for example, transaction and tax records) for a limited period, or where limited data is briefly retained in secure backups. Separately, to prevent abuse of our free credits, we keep an irreversible, hashed record of email addresses that have received free credits; this record contains no readable email address, is not linked to your account or profile, and persists after deletion solely to stop repeated free-credit sign-ups.
10. Your privacy rights
Depending on where you live, you may have some or all of the following rights over your personal information:
- to access a copy of the personal information we hold about you;
- to have inaccurate information corrected;
- to have your information deleted;
- to restrict or object to certain processing;
- to receive your information in a portable format;
- to withdraw any consent you have given, at any time; and
- to lodge a complaint with a data-protection authority.
You can exercise many of these rights directly in your account settings, or by contacting us at support@inquocv.com. We will respond within the time required by applicable law. If you are in the UK, you may also complain to the Information Commissioner's Office (ICO); if you are in the EEA, to your local supervisory authority; and if you are in another country — for example India or elsewhere — to your national data-protection authority where one exists.
11. How we protect your information
We use appropriate technical and organizational measures designed to protect your personal information against unauthorized access, loss, misuse, or alteration — including encryption of data in transit, restricted access controls, and secure storage of credentials. No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
12. Children's privacy
The Service is not intended for children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
13. Third-party links
The Service may contain links to third-party websites or services that we do not control. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party services you visit.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, or legal requirements. When we make material changes, we will update the “last updated” date above and, where appropriate, notify you. Your continued use of the Service after an update takes effect means you accept the revised policy.
15. Contact us
If you have any questions about this Privacy Policy or how we handle your personal information, or if you wish to exercise your rights, please contact us. InquoCV Ltd is the data controller responsible for your personal information.
- support@inquocv.com
- Data controller
- InquoCV Ltd
- Registered in
- England and Wales, United Kingdom
- Registered office
- 2 Frederick Street, Kings Cross London, WC1X 0ND United Kingdom