Privacy Policy
Last updated: 26 September 2026
Who We Are
IFLOCK LTD operates cvlift.ai and is the controller of the personal data described in this policy. IFLOCK LTD is registered in England and Wales (company number 17474520). Our registered office is 82A James Carter Road, Mildenhall, IP28 7DE, United Kingdom.
Information We Collect from All Our Users
We collect data to operate efficiently and deliver a seamless, personalised experience. This includes personally identifiable information such as your name, email address, and billing information when you sign up or subscribe. We also collect usage data such as IP addresses, device and browser type, visited pages, clicked elements, session durations, and crash reports. Because cvlift.ai is a CV builder, we additionally store the CV content and personal details (including uploaded documents such as Word or PDF files) that you create or upload on the platform so that we can render, format, and improve your CV.
This data helps us troubleshoot issues, enhance features, and tailor the platform to your needs. We only collect data relevant to your use of the platform and do not collect unnecessary personal information. All data is securely stored and processed in compliance with international data protection laws.
- Personal info such as name, email, and profile details
- CV content and documents you create, upload, or edit
- Device, browser, and usage behaviour logs
How We Use the Data You Provide
The data we collect is used to enhance your experience, keep the platform stable, and help our AI deliver smarter suggestions. Your personal data enables us to maintain your account, handle subscriptions and payments, and send essential account communications. Usage analytics and behavioural patterns help us understand how the platform is used so we can optimise performance and introduce meaningful updates. Our real-time writing suggestions and formatting features depend on the CV content you're actively editing in order to assist you intelligently.
We never use your CV content or personal data for external AI training without your explicit consent. The insights we gain from your interaction with our tools help us personalise the platform and make it smarter with every session.
- Generate personalised writing suggestions based on your interaction with the editor
- Optimise platform features using real-time feedback and usage patterns
- Improve stability, detect abuse, and prevent unauthorised access
Protecting Your CV and Personal Data
Your CV is your personal document, and protecting it is our highest priority. Any CV content or files you upload remain strictly private and are never accessible to unauthorised personnel or used for model training without explicit permission. All CV data and personal information is encrypted both in transit and at rest using industry-standard protocols. Your documents are stored in isolated environments designed for privacy, stability, and compliance.
- Encryption in transit and at rest using industry-standard protocols
- Private storage accessible only from your own account
- CV content never used to train AI models without your consent
Sharing Data with Third-Party Service Providers
We use third-party services to operate the platform. These include AWS for hosting and storage, Anthropic for AI features, PostHog for analytics, Sentry for error tracking, and Loops for account and email communications. Depending on the feature you use, these services receive data needed to provide that feature, such as CV content for AI assistance, usage events, error reports, or your email address for communications.
Paddle handles purchases as our merchant of record and acts as an independent controller for transaction data. Its handling of that data is described in the Paddle privacy notice. Google and LinkedIn provide optional sign-in services. Analytics and advertising tools are described in the cookies section below.
How We Use Cookies and Tracking Tools
Cookies help personalise your experience and measure how the site performs. We use a small number of essential cookies to keep the site working, plus analytics and advertising cookies (PostHog, Google Ads, Meta) to understand traffic and improve the product.
Visitors in the EEA, the UK, and Switzerland see a cookie banner on their first visit and can accept or reject the analytics and advertising cookies. You can change your decision at any time by clearing your browser's site data for cvlift.ai, after which the banner will reappear.
Future Changes to This Privacy Policy
We may occasionally update this policy to reflect new features or legal requirements. You'll be notified of significant changes via email or an in-product alert.