Privacy Policy

Effective date: 2 September 2026|Last updated: 2 September 2026

1. Who we are

VerityCV (“we”, “us”, “our”) is a service that helps you build a master profile of your career history and generate tailored CVs and cover letters for specific job applications. VerityCV is an early-stage product currently offered as a preview. When we establish a formal operating entity, we will update this policy with its name and Australian Business Number.

We are committed to protecting your personal information and handling it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains what personal information we collect, why we collect it, who we share it with, how we store and protect it, and how you can access, correct or delete it.

2. What this policy covers

This policy applies to personal information we collect through the VerityCV website and application. It does not cover third-party websites we link to, which have their own privacy policies.

3. The personal information we collect

Account information. When you sign in, we collect your email address. We use passwordless sign-in (a “magic link” emailed to you), so we do not collect or store any password.

Your career profile (“master CV”). When you build your profile, we collect the information you provide about your working life, including your name, contact details (email, phone number, links such as LinkedIn), location, employment history (roles, employers, dates, responsibilities), achievements and metrics, skills, qualifications, education and awards. You may upload existing CVs or paste CV text, which we read to help build this profile.

Information about other people.Your profile may include the names, job titles and employers of referees, colleagues or clients (for example, in testimonials). If you provide personal information about someone else, you are responsible for making sure you are entitled to do so, and you should ensure they are aware of this policy. Please do not include another person’s information without a proper basis.

Job descriptions and generated documents. When you tailor an application, we collect the job description you paste (which may identify the employer you are applying to) and we store the tailored CV or cover letter we generate for you, along with the intermediate analysis used to produce it.

Writing-style samples.If you set up a “voice” profile, we collect your writing-style preferences and any sample text you provide.

Technical information. We use essential cookies to keep you signed in. We do not currently run advertising or analytics tracking. If this changes (for example, if we add marketing or product analytics), we will update this policy and, where required, seek your consent before setting non-essential cookies. See section 11.

Sensitive information.We do not ask for “sensitive information” as defined in the Privacy Act (such as health, racial or ethnic origin, religious or political information). Please do not include sensitive information in your profile or uploads.

4. How we collect your information

We collect personal information directly from you: when you sign in, build or edit your profile, upload or paste documents, or tailor an application. We do not buy personal information or collect it from third-party data brokers.

5. Why we collect it and how we use it

We collect and use your personal information to:

• create and manage your account and sign you in;
• build and store your career profile from the information and documents you provide;
• generate tailored CVs and cover letters for the roles you choose;
• keep a history of your generated documents so you can return to them;
• respond to your enquiries and provide support;
• diagnose problems you report to us — which may involve an authorised administrator viewing your account (your profile, generated documents and application tracker) to troubleshoot. Any such access is read-only and is logged;
• operate, secure, maintain and improve the service; and
• contact you about the service.

We only use your information for the purposes above, for purposes you would reasonably expect, or as otherwise permitted or required by law.

6. Who we share it with

We do not sell your personal information. We share it only with the service providers we rely on to run VerityCV, and only so far as needed to deliver the service:

• Supabase — our database and authentication provider. Your account, profile, voice and generated documents are stored here. Supabase hosts this data on Amazon Web Services (AWS) infrastructure located in Sydney, Australia.
• Anthropic — the artificial intelligence provider whose Claude models process your text to extract, tailor and refine your documents. See section 8.
• Vercel— our application hosting provider. Our application code runs in Vercel’s Sydney, Australia region. Vercel is a United States company, and its own operational systems (such as build and deployment logs) are based there (see section 8).
• Email delivery — used to send your sign-in links and service emails.
• HubSpot — our contact management system. When you sign in, we add your email address to HubSpot so we can manage our user list and contact you about the service. Only your email address is sent. Your profile, uploaded CVs and generated documents are not.

We may also disclose personal information where required or authorised by law, or to protect our rights, safety, or the rights and safety of others.

7. AI processing of your information

VerityCV uses Anthropic’s Claude models to do the core work of the product: reading your uploaded or pasted CVs, building your profile, analysing job descriptions, and generating tailored documents. To do this, the relevant text (including your profile, job descriptions and voice samples) is sent to Anthropic’s API for processing and the result is returned to us.

Under Anthropic’s commercial API terms, the inputs and outputs we send are not used to train Anthropic’s models. Anthropic processes this data to provide the service to us and in accordance with its own terms and privacy commitments.

8. Overseas disclosure

Your stored data (account, profile, generated documents) is held in Australia (AWS Sydney).

However, some processing happens overseas:

• the AI processing described in section 7 involves disclosing text to Anthropic, which is based in the United States;
• our application host, Vercel, runs our code in Sydney, but as a United States company its own operational systems (such as build and deployment logs) are based there; and
• some other providers (for example, email delivery and HubSpot) process limited information, such as your email address, outside Australia.

By using the tailoring features, you acknowledge that the information you submit for processing is disclosed to and processed in the United States. We take reasonable steps to ensure our providers handle your information appropriately, but overseas recipients may be subject to different laws to those in Australia.

9. How we store and protect your information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure:

• data is stored in a database with row-level security, so each account can only access its own data;
• data is transmitted over encrypted (HTTPS) connections;
• our AI provider is accessed using server-side credentials that are never exposed to your browser;
• documents you upload to build your profile are processed in memory and are not stored as files. Only the reviewed profile you choose to save is retained.

No method of transmission or storage is completely secure, but we work to protect your information and to hold it only as long as we need it.

10. Data retention

We keep your personal information for as long as your account is active and you use the service.

• Your profile and voice are replaced each time you save an update, so we hold only the current version.
• Your generated documents and the job descriptions used to create them are retained in your account history until you or we delete them.

When you ask us to delete your account, or after a reasonable period of inactivity, we will delete or de-identify your personal information, unless we are required to keep it by law.

11. Cookies and tracking

We currently use only essential cookies needed to keep you signed in and to operate the service. We do not currently use advertising or analytics cookies.

We plan to introduce additional tools in future (for example, product analytics), which may set additional cookies. Before we do, we will update this policy and, where the law requires consent, ask for your consent to non-essential cookies.

12. Accessing and correcting your information

You have the right to ask for access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete or misleading.

You can download everything we hold about you at any time, as a machine-readable file, from your Account & data page. You can also update most of your profile information directly in the app. For anything you cannot change yourself, contact us at hello@veritycv.com and we will respond within a reasonable time. We will not charge you for making a request, though a reasonable cost may apply for giving access in some cases. If we refuse access or correction, we will tell you why in writing.

13. Deleting your data

You can delete your account and all the personal information associated with it yourself, at any time, from your Account & data page. Deletion is immediate and permanent. If you would rather we do it for you, email hello@veritycv.com and we will action it within a reasonable time and confirm once done. In either case we may need to retain certain information where the law requires it.

14. Complaints

If you have a concern about how we have handled your personal information, please contact us first at hello@veritycv.com so we can try to resolve it. We will acknowledge your complaint and aim to respond within a reasonable time.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992

We also comply with the Notifiable Data Breaches scheme. If a data breach is likely to result in serious harm to you, we will notify you and the OAIC as required by law.

15. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. The current version is always available on our website.

16. Contact us

For any privacy questions, requests or complaints, email us at hello@veritycv.com.