Loading...
Effective Date: 2025-06-04
Last Updated: 2025-12-27
At CVOR, privacy is a core design principle. All CVOR products are built to minimise centralised data collection and to operate primarily through local, user-controlled processing.
This Privacy Policy explains how information is handled when you use CVOR software and services, including:
CVOR is operated by CVOR Technologies Ltd, incorporated in England & Wales. Where applicable under data protection law, CVOR Technologies Ltd acts as a data controller only with respect to the limited categories of data it actually processes, and not for user content that remains on the user’s device or within user-controlled third-party services.
This Privacy Policy applies to the following CVOR Products and services:
This Privacy Policy does not apply to third-party services, APIs, job sources, cloud providers, operating systems, or language models that you independently connect to the CVOR Products. Such services are governed by their own privacy policies and terms.
CVOR Products are designed around the following principles:
As a result, the majority of data processed through CVOR Products is handled locally or within user-controlled third-party services.
CVOR is designed not to collect or store:
CVOR does not sell, rent, or trade personal data, and does not use personal data for advertising, ranking, or behavioural profiling.
The CVOR mobile app provides document and image utilities (e.g., watermarking, PDF tools).
These features are designed to process content locally on your device, with no transmission to CVOR-controlled servers, including:
Key Points:
Any data you enter or process in the App remains local unless explicitly shared by you using your device’s sharing tools. Any sharing action is voluntary, and CVOR is not responsible for misuse once content leaves your device.
You may choose to embed visible or invisible watermark data into documents, including:
Watermarking is processed entirely on-device. CVOR does not access, transmit, or log this information. You are solely responsible for any content embedded or shared.
The CVOR desktop job matching engine is a locally installed application that performs job-match automation on your computer.
At your direction, it may:
These operations are designed to occur locally or directly between your device and third-party services. CVOR does not operate centralised infrastructure for receiving or storing CVs, job listings, match results, or API credentials.
The CVOR desktop engine may use a local, open-source language model to assist with job-matching analysis and explanation generation.
Language models may be downloaded from Hugging Face Hub, an independent third-party model distribution platform.
Related documentation:
CVOR does not train, fine-tune, or modify language models using user data.
CVOR Products may access Google Drive and Google Sheets only after you explicitly authorise access via Google OAuth.
CVOR Products may access limited Google user data only after you explicitly authorise access via Google OAuth. This section provides a detailed disclosure of the data accessed, its use, storage, sharing, and retention, in accordance with Google API Services User Data Policy requirements.
CVOR Products request the following Google API scopes solely to enable user-requested functionality:
Google Drive API — drive.file
Access to files and folders that you explicitly create, select, or manage using CVOR Products.
Google Sheets API
Access to Google Sheets that are explicitly created or selected by you for storing job-matching outputs or entitlement indicators.
CVOR does not request full Drive access and cannot access files that are unrelated to CVOR-generated or user-selected content.
Depending on your actions, CVOR Products may access:
CVOR does not access:
Google user data is accessed and used only to provide the functionality you explicitly request, including:
CVOR Products:
All substantive processing occurs locally on your device or directly between your device and Google.
CVOR does not share Google user data with any third parties.
Specifically:
Any access to Google services occurs directly between your device and Google’s servers under Google’s own terms and privacy policy.
Security protections rely on:
You may revoke CVOR’s access at any time via your Google Account permissions.
Because CVOR does not store Google user data on its own servers, deletion requests are fulfilled by you through Google’s standard file deletion mechanisms.
CVOR’s use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Google user data is:
Any additional APIs you connect operate independently of CVOR. CVOR is not responsible for their data handling practices or legal compliance.
CVOR uses third-party open-source libraries in the App, which are governed by their respective open-source licenses. These libraries are integrated for the purpose of enhancing the functionality of the App.
By using the App, you agree to comply with the terms and conditions of these open-source licenses.
For inquiries, contact us on support@cvor.io.
Payments may be processed via platform providers (e.g., Apple App Store, Google Play).
We use third-party services solely for performance and crash diagnostics. These providers may process limited anonymized data, such as crash logs and device metadata.
Google Analytics for Firebase is configured with:
We do not authorize these services to use your data for behavioural advertising or profiling.
These providers are subject to their own privacy policies and compliance obligations, including:
⚠️ CVOR does not control how these services handle data beyond our limited use and configuration. We rely on their published compliance with applicable privacy laws and best practices.
Note: Raw crash reports that might contain transient technical details are automatically anonymised and aggregated by Firebase before being made available to us. No personal identifiers, advertising IDs, or user-specific information are ever stored or accessible to us. Aggregated, non-personal analytics (such as total crash-free users or average crash rates) may be retained by Firebase for longer periods in accordance with their retention practices. These statistics are used only to understand long-term app stability and trends, not to profile or identify users. Because the data is fully anonymised and cannot reasonably be linked to any individual, it is not considered personal data under GDPR or similar laws.
You can find their policies below:
CVOR Products are general-purpose tools and are not directed at children.
CVOR Products rely on device-level security. Users are responsible for securing their devices and third-party accounts.
Depending on your jurisdiction, you may have rights under GDPR, UK GDPR, or CPRA. These rights generally apply only to limited data such as support communications.
Contact us on support@cvor.io
Limited technical data may be processed outside your jurisdiction using appropriate safeguards.
Material changes will be communicated via the app or website.
This Privacy Policy is governed by the laws of England & Wales, without prejudice to mandatory local protections.
CVOR is a software tool, not a job board, recruiter, employer, or data broker.
CVOR does not guarantee employment outcomes.
Users remain responsible for content they create and services they connect.