Skip to content

Privacy Policy

Last updated: October 2026

CompleteCV is a free CV builder. You don't need an account to build or preview a CV; downloading the PDF needs a free account. This page explains what happens to your information when you use completecv.com.

1. Without an account, your CV stays in your browser

Everything you type into the editor is saved in your own browser on your device (in its local storage). Unless you save it to an account, we don't keep a copy and we can't see it. If you clear your browser data, your CV is deleted, so use Export backup in the editor to keep a backup file. That file is saved to your device, not to us.

2. Free accounts

You need a free account to download a PDF of your CV or letter. It also lets you save your CVs and letters, open them on any device and use the CV review (and, with Pro, track your job applications). If you do, we store:

  • Your email address, and when you created the account and confirmed your email.
  • A scrambled form (hash) of your password, if you set one. We never store or see the password itself.
  • If you sign in with Google: your Google account's email address and its account ID, which Google gives us so we can recognise you next time. We only ask Google for your email address. We don't get your Google password, contacts or anything else, and we don't post or send anything through your Google account. Google's own privacy policy covers what Google does when you sign in there.
  • The CVs you save to your account, including any photo in them, and when they were last saved. While you're signed in, the CV you're editing is saved to your account as you type.
  • Letters you choose to save to your account (with Save to my account in a letter tool): what you typed into the form, the letter text, its design (including a signature you drew or uploaded, if you added one) and when it was last saved. Once saved, the letter is saved to your account as you type.
  • Designs you save as your own templates ("My designs"): the name you give them, the template, accent colour and design settings. No CV content. The free plan keeps 3 in your account; every design also stays in your browser.
  • Job applications you add to the application tracker: company, job title, a link to the job ad, the date you applied, the status, your notes, and which of your saved CVs and letters you used.
  • Version history: for CVs saved to your account, we keep earlier versions so you can restore them: automatically every 10 minutes or so while you edit, before a restore, and when you save one yourself. We keep the last 30 per CV for up to 60 days. Deleting a CV or your account deletes them.
  • Share links: if you turn one on, anyone with the link can see that CV as currently saved, as a page or as a phone-friendly web page, and download it as a PDF unless you turn the download button off. Links aren't listed on search engines. We store only a scrambled (hashed) form of the private link. You can hide your contact details, make a new link or turn it off at any time, and the old link stops working at once.
  • Readable links: if you choose one (such as completecv.com/cv/your-name/), we store the name you picked. It works only while your share link is on, and anyone who knows or guesses it can open your shared CV, so don't use one if that matters to you.
  • View counts: we count how many times your shared CV is opened each day, so you can see it in the Share window. We keep only the date and the number, nothing about who opened it (no IP address, device or location). Your own visits while signed in aren't counted.
  • For each device you're signed in on, a hash of its session token and when it was last used.

We only email you to send a 6-digit code (to confirm your email or a school email, reset your password or delete your account) or a security notice about your account: that your password was changed, that someone tried to sign up with your address, that Google sign-in was added to your account, or that your account was deleted. These emails are sent through Cloudflare's email service. We don't send newsletters or marketing.

Deleting your data: delete a single CV, letter or application, or your whole account, from your account pages. To delete your account we email you a code first, to make sure it's you. Deleting it removes your email, password hash, the link to your Google account (if any), sessions and every CV (with its version history and share link), letter and application saved in it straight away. The CV and letters in your browser aren't affected. We then send one last email to confirm the deletion and keep nothing else.

Cookies: when you sign in we set one cookie, which keeps you signed in. If you choose Continue with Google, we also set a short-lived cookie that protects the sign-in from forgery; it's deleted when you come back from Google, or after 10 minutes. It is needed for the account to work, isn't used for tracking, and ends when you sign out or after 30 days without use. Without an account, no cookie is set.

3. Downloading a PDF

When you download a PDF, your CV is sent to our PDF service over an encrypted connection. The service turns it into a PDF in a browser run by Cloudflare (our host) and sends it straight back. It doesn't store your CV or write its contents to logs. To stop abuse through rate limits, it counts downloads using a hash of your IP address and deletes those counts within a day. We also keep one site-wide total of CV downloads (a single number, with nothing about you or your CV), which we may show on the site.

The file is named after you and your job title (for example "Ada Obi - Product Manager CV.pdf"), and the same name is set as the PDF's title. If you're signed in and choose Email me the PDF, the PDF is made the same way and emailed, as an attachment, to your account's own address through Cloudflare's email service. It can't be sent to any other address, and we don't keep a copy. Your browser remembers how many PDFs you've downloaded, so we only ask for a review now and then, never on your first download.

4. Letters and the ATS checker

The letter tools save your draft letter in your browser, the same way as the CV editor. If you're signed in and choose Save to my account, the letter is also stored in your account (see section 2). When you download a letter as a PDF, its text goes to the same PDF service described above and isn't stored. A signature you draw or upload is turned into a small picture in your browser and kept inside the letter (in your browser, and in your account if you save the letter there); it is never uploaded separately.

The ATS resume checker reads your PDF inside your browser. The file isn't uploaded to us or stored anywhere.

Importing an existing CV. When you import a PDF, a Word file (.docx), a text file or pasted text into the editor, it's read and sorted into sections inside your browser: nothing is uploaded and you don't need an account. If you then choose "Sort with AI", the text goes to Cloudflare Workers AI as described in section 5 (with contact details removed first). If you import a photo or scan of your CV, you need a free account: the image (made smaller in your browser first) is sent to our server and read by an AI model on Cloudflare Workers AI. Unlike text, an image can't have your name and contact details taken out first, so they're part of what the model reads. The image and the text read from it are not stored or logged. Reading a photo uses one of your imports. While you sign in to sort a CV with AI, its text is kept in your browser tab (session storage) and removed when you're back.

5. CV review and writing tools (optional)

The CV review needs a free account and only runs when you ask for it. The score and findings come from fixed checks (word counts, bullet points, dates, keywords and so on) that run on our server and in your browser; they don't use AI. Only the few lines the checks flag, and any target job you enter, are sent to Cloudflare Workers AI, which runs an open AI model (Qwen) on Cloudflare's network to suggest rewrites. Cloudflare doesn't use it to train models.

  • The lines sent for rewrites have email addresses, phone numbers and links removed first. Your name, photo, date of birth, references and the rest of your CV are not sent to the AI model.
  • If you paste a job ad, it's used to pick out keywords to look for on your CV. It isn't stored.
  • If you upload a PDF on the CV review page, it's read in your browser. Its text is sent to our server and on to Cloudflare Workers AI only when you ask for a review, or to import it into the editor. Before sending it, we remove email addresses, phone numbers, web links and the first line if it looks like your name. This is done automatically and on a best-effort basis, so other details in the text (such as an address) may still be included.
  • Importing into the editor with AI ("Import into the editor and fix it" or "Sort with AI") uses the AI model once to sort your CV's text into sections. Importing without AI happens in your browser and sends nothing. Your name and contact details are filled back in from your file in your browser. The imported CV is then saved in your browser like any other CV (and to your account only if you save it there).
  • If we ask you to sign in when you press Review, what you were doing (the job title you entered and, for an uploaded PDF, its text) is kept in your browser tab (session storage), so the review can carry on when you're back. The same goes for a share link or a saved version (just your choices, never your CV). It's removed once you're back, or when you close the tab.
  • The writing tools (the Writing tab in the editor, and Improve and Suggest bullets on the Content tab) also need a free account and only run when you press a button. Each sends only what that tool needs to Cloudflare Workers AI: the line you're improving; a job title and its existing bullets; for a summary, skills, a cover letter draft or coaching tips, your CV's text with email addresses, phone numbers, links and the first line (usually your name) removed; for spelling and grammar or job-ad matching, the lines being checked; for a translation, the words to translate (never your contact details); and any job ad you paste. "Start with a draft" (under New CV in your account) sends the answers you type in its form (the job you want, your jobs, a few lines about your work and an education line, with any email addresses, phone numbers and links taken out) and uses one writing-tool go. Nothing on your CV changes until you choose to use a suggestion. A translated copy is saved like any other CV: to your account if you're signed in. A cover letter draft is handed to the cover letter builder in your browser tab only.
  • We don't store your CV text. To avoid paying twice for the same work, suggested rewrites and other writing-tool suggestions are kept for 7 days under a one-way code made from the request (not the request itself), so the same lines asked again get the same answer; then they're deleted. For a CV saved to your account, we keep its review scores (just the number, level and date) for your score history; they're deleted with the CV or your account. Scores for CVs in your browser stay in your browser.
  • We count how many times each AI tool is used each day and what it costs (numbers only, with no CV text and no link to you).
  • Cloudflare processes the text only to produce the review or the suggestions, under its own data terms, and doesn't use it to train models.
  • Each account has an allowance of reviews, imports and writing-tool uses (on the free plan, 1 review and 3 writing-tool uses a day and 3 imports in total; on Pro, 5 reviews, 30 writing-tool uses and 20 imports a day). To count them we keep a hash of your account ID with a counter, and delete it when the period ends.

6. Paying for Pro (optional)

If you upgrade to Pro, the payment is made with Paystack, our payment provider. You enter your card or bank details on Paystack's page: we never see or store them. Paystack's privacy policy covers what it does with them.

  • We send Paystack your account email, the plan you chose and your account ID, so it can charge you and tell us about the payment.
  • We store your plan, its status and renewal date, Paystack's codes for you as a customer and for your subscription (so we can cancel or update it), and a record of each payment: its amount, date, Paystack reference and whether it was refunded. Paystack emails you the receipts.
  • Student discount: if you confirm a school email, we store that address, when you confirmed it, and (for 15 minutes) a hash of the code we email to it. We only email it that one code.
  • Deleting your account deletes all of this from our side and cancels the subscription. Paystack keeps its own record of the payments, as the law requires of payment providers.

7. Feedback and career updates

  • Give feedback. What you type, the page you sent it from (just the path, like /editor/), and your account ID if you're signed in are stored and emailed to our support inbox. We only have your email address if you type it in the box for a reply. Sending is rate limited using a hash of your account ID or IP address.
  • Testimonials. We may ask to quote your feedback on the site. We only show a quote if you agree, and only with the name you're happy to use (and a role, if you give one). We keep the quote, that name, when you agreed and when we published it. Ask us and we'll take it down; deleting your account doesn't remove a quote by itself, so tell us if you want it gone.
  • Career updates. Off unless you turn them on in your account settings. We then email a confirmation link to your account address and send nothing else until you click it. We store your choice, when you confirmed, and one-way codes for the confirm and unsubscribe links. Every update has an unsubscribe link, and you can turn them off in your settings. Deleting your account removes this too.

8. What we don't collect

You don't have to sign up to build or preview a CV (only to download it). If you don't create an account, we don't ask for your name, email address or a password. Accounts are free; the optional Pro plan is paid through Paystack (section 6). To protect sign-in from abuse, we count attempts using a hash of your IP address and email address, and delete those counts within a day.

9. Hosting, analytics, ads and cookies

The website is hosted on Cloudflare, which processes standard request data (such as IP address and browser type) to deliver and protect the site. We use Cloudflare Web Analytics to count page visits. It doesn't use cookies and doesn't build a profile of you. CompleteCV is free because it may show ads from Google AdSense. Where ads are shown, Google may use cookies or similar technology, and we ask for your consent first where the law requires it. The editor itself doesn't need cookies to work; the only cookie we set is the sign-in cookie described above. Accounts, saved CVs and letters, and tracked applications are stored in Cloudflare's database service.

10. Your choices

  • Delete your CV at any time with Start a new CV in the editor, or by clearing your browser data for this site.
  • Build and preview CVs without an account, or delete your account and everything in it at any time from your account page.
  • Don't use the CV review if you'd rather your CV text never left your device, except to make a PDF.
  • Where ads are shown, you can turn off personalised ads in Google's ad settings (adssettings.google.com).

11. Children

CompleteCV is intended for people aged 16 and over.

12. Changes and contact

If this policy changes, we'll update the date at the top of this page. Questions? Email privacy@completecv.com.