Score my CVSCORE MY CV®
Log in

Privacy Policy

Last Updated: July 21, 2025

Welcome to SCORE MY CV®! When you use SCORE MY CV — an AI CV-evaluation assistant developed by The Micro Company AB — you trust us with your personal information. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR). This Privacy Policy explains what data we collect, how we use, store, and share it, and your rights regarding your information. We have written it in clear, user-friendly language.

By using SCORE MY CV, you agree to the practices described in this policy. If you have any questions or concerns, please contact us at hello@offwork.ai.

1. Who We Are

SCORE MY CV is a product of The Micro Company AB, located at De Geersgatan 10, 115 29 Stockholm, Sweden. For the purposes of data-protection law, The Micro Company AB is the “data controller” of your personal data processed through SCORE MY CV. You can reach us with privacy questions at hello@offwork.ai.

2. What Data We Collect

When you use SCORE MY CV (for example, when you upload a CV file, import a CV from Google Drive, or paste CV text into the web app), we collect certain information to provide and improve our CV-scoring service. This includes:

2.1 CV Content

With your permission, SCORE MY CV accesses the full content of the CV(s) you upload, import, or paste, including:

  • Personal details you include in the CV (name, contact information, location, links).
  • Employment history, education, skills, certifications, and any other sections you provide.
  • Formatting and layout details (headings, bullet points, fonts, and structure). We analyze this information to generate a score out of 100, provide section-by-section feedback, highlight strengths, and suggest improvements.

2.2 Optional Job-Description Data

If you choose to paste or upload a job description or reference a URL to a job posting, SCORE MY CV processes the content of that description to benchmark your CV against the role requirements. We do not scrape job boards on your behalf — only the description text you provide is processed.

2.3 Uploaded Files and Metadata

When you upload files (PDF, DOCX, images, etc.), we store the files temporarily to process them. File metadata (file name, size, format, and upload timestamp) is logged to aid troubleshooting and usage analytics.

2.4 Analysis Results

We generate analysis artifacts such as:

  • The overall CV score and category breakdowns.
  • Lists of suggested keyword additions.
  • Highlighted strengths or potential interview focus points.
  • ATS-readiness results (e.g., parsing success, readability scores). These results are stored in your account dashboard so you can review them later.

2.5 Account and Authentication Data

If you create an account, we collect:

  • Your name (optional) and email address.
  • Encrypted password or single-sign-on identifier.
  • Authentication tokens or OAuth credentials for any integrated storage provider (e.g., Google Drive) that you authorize. Tokens are stored encrypted and used only to retrieve and save files you request.

2.6 Usage Logs and Technical Data

Like most online services, SCORE MY CV automatically collects usage data:

  • Actions (e.g., file uploads, analysis requests, score view events).
  • Timestamps of interactions.
  • IP address, browser type, device information, operating system.
  • Error logs and crash reports. We use this data to monitor performance, detect abuse, and improve the service.

2.7 Payment Information

If you purchase a subscription, our payment processor (Stripe) collects your payment card details. We receive a payment confirmation record (last four digits of card, expiry month/year, billing country, subscription plan, and transaction IDs) but never see full card numbers or CVCs.

2.8 Support Communications

If you contact us, we collect the information you provide (for example, screenshots, file samples, or error descriptions) to assist you.

We do not collect more data than necessary to fulfill the CV-evaluation tasks. We do not knowingly collect sensitive categories of personal data (e.g., health, racial origin, religious beliefs) unless you choose to include such data in your CV. If you do not provide certain data (for example, you choose not to add a job description), some features may be limited but SCORE MY CV will still function.

3. How We Use Your Data

We use the collected information to operate, provide, and improve the SCORE MY CV service. Specifically, we use your data for the following purposes:

3.1 Providing the CV-Scoring Service

The primary use of your data is to analyze your CV and deliver feedback:

  • Parsing your CV content to calculate the overall score and category scores.
  • Generating tailored suggestions and highlighting strengths.
  • Comparing your CV to any job description you provide.
  • Displaying results in your dashboard and optionally writing a marked-up version back to your connected drive (if you enable that integration).

3.2 Maintaining Your Reports

We store analysis results so you can revisit them, track improvements over time, and download copies. You may delete any CV or report at any time.

3.3 Communication with You

We use your email address to send service-related messages: account verification, payment receipts, analysis completion notices, critical updates, or responses to support requests. We do not send marketing emails unrelated to SCORE MY CV unless you explicitly opt-in.

3.4 Improving and Developing SCORE MY CV

We analyze aggregated usage logs (e.g., typical score ranges, common formatting issues) to troubleshoot problems, refine our scoring rubric, and develop new features. Wherever possible, we use anonymized data to protect your privacy.

3.5 Customer Support

If you contact support, our team may access the CV file or analysis results you reference to troubleshoot. Access is limited to the minimum data needed to resolve your issue.

3.6 Security and Abuse Prevention

We process IP addresses, usage patterns, and authentication events to detect spam uploads, abuse, or unauthorized access attempts.

3.7 Legal Compliance

We may use or preserve your data to comply with legal obligations, such as fulfilling lawful requests from authorities or retaining transaction records for accounting purposes.

We will not use your personal data for advertising purposes, nor will we sell or rent your data. Your information is used solely to serve you and to improve SCORE MY CV.

4. AI / Machine-Learning and Third-Party Services

SCORE MY CV relies on third-party infrastructure and AI vendors to deliver fast, high-quality analysis. Key principles:

4.1 Data Processing with AI Vendors

We may send snippets of your CV text to natural-language processing APIs (e.g., OpenAI or Anthropic) to classify sections, detect keywords, or generate improvement suggestions. We only send the minimum text required for each task, and vendors are contractually prohibited from using that data to train their public models.

4.2 Storage Integrations

If you link Google Drive, Dropbox, or OneDrive, SCORE MY CV retrieves files you select and may store improved versions back to your account. Data transfer occurs via secure OAuth2-authorized API calls. We do not access any other files beyond those you explicitly choose.

4.3 No Training on Your Personal Data

We do not use the content of your CV, job descriptions, or analysis results to train or improve our underlying machine-learning models. Model-tuning is conducted with synthetic, anonymized, or publicly available datasets.

4.4 Transparency and Consent

All third-party interactions happen only after you connect or authorize the integration. You can disconnect at any time via account settings or the provider’s security console.

5. Legal Bases for Processing (GDPR)

We rely on the following legal bases:

  1. Consent - When you upload a CV or connect a storage provider, you consent to our processing of that data. You may withdraw consent by deleting the CV or revoking access.
  2. Performance of a Contract - Providing the CV-scoring service is part of our user agreement with you; processing is necessary to fulfill that contract.
  3. Legitimate Interests - We have legitimate interests in understanding usage, improving security, and developing features, balanced against your privacy rights. You may object to processing based on legitimate interests.
  4. Legal Obligation - We may retain or disclose certain data to comply with laws (e.g., tax regulations, court orders).

6. How We Share Your Data

We do not sell your personal information. We share it only in these situations:

6.1 Service Providers (Processors)

We engage cloud hosts, database providers, email delivery services, analytics vendors, and AI platforms. They process data on our behalf under strict confidentiality agreements and only as necessary to operate SCORE MY CV. If providers are outside the EEA, we use GDPR-compliant transfer safeguards.

6.2 User-Authorized Integrations

When you link Google Drive or similar, we exchange files and metadata with that service to fulfill your requests. The external provider handles data per your agreement with them.

6.3 Legal Requirements and Protection

We may disclose data when required by law or to protect our rights, prevent fraud, or ensure user safety. We aim to notify you unless legally prohibited.

6.4 Business Transfers

If The Micro Company AB undergoes a merger, acquisition, or asset sale, your data may transfer to the successor entity, which must honor this Privacy Policy.

Otherwise, we share data with no one.

7. Data Retention

  • Active Account - We retain CV files, analysis results, and account data for as long as your account is active.
  • Deletion or Disconnection - When you delete a CV, disconnect a storage provider, or close your account, associated personal data is deleted from active systems within 30 days and from backups within 30 days thereafter.
  • Legal Retention - Transaction records or minimal identifiers may be kept longer if legally required.
  • Anonymized Data - Aggregate, anonymized analytics may be kept indefinitely.

8. Security Measures

We employ:

  • Encryption—TLS for data in transit, AES-256 for data at rest (including token storage).
  • Access Controls—Role-based permissions, least-privilege principle, mandatory MFA for admin panels.
  • Monitoring & Testing—Continuous logging, intrusion detection, periodic penetration tests.
  • Secure Development—Code reviews, dependency scanning, privacy-by-design methodology.
  • Incident Response—Documented procedures to notify users and authorities of breaches within GDPR timeframes.

You are responsible for safeguarding your own device credentials and promptly revoking integrations if you suspect misuse.

9. International Data Transfers

We aim to store data in the EU, but some processors (e.g., OpenAI, Stripe) may operate in the US or other jurisdictions. When transferring data outside the EEA we rely on:

  • Adequacy decisions by the European Commission, or
  • Standard Contractual Clauses (SCCs) and additional safeguards.

You can request a copy of relevant SCCs via email.

10. Your Rights

Under GDPR you have:

  • Access - Request a copy of your personal data.
  • Rectification - Correct inaccurate or incomplete data.
  • Erasure - Delete your data (“right to be forgotten”).
  • Restriction - Pause processing under certain conditions.
  • Portability - Receive your data in a machine-readable format.
  • Object - Object to processing based on legitimate interests.
  • Withdraw Consent - Revoke consent at any time.
  • Lodge a Complaint - Contact a supervisory authority; in Sweden this is Integritetsskyddsmyndigheten.

To exercise these rights, email hello@offwork.ai. We may verify your identity before fulfilling requests and will respond within one month (extendable by two months for complex requests).

11. Children’s Privacy

SCORE MY CV is not intended for children under 13 (or a higher age where applicable). We do not knowingly collect data from children. If we learn that a child has provided personal data, we will delete it promptly. Parents may contact us to request deletion.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in practices, technologies, or legal requirements. The “Last Updated” date at the top reflects the most recent revision. For significant changes, we will provide prominent notice (e.g., email or in-app banner). Continued use of SCORE MY CV after the effective date signifies acceptance of the updated policy.

13. Contact Us

Your privacy is important to us. For questions, concerns, or requests:

The Micro Company AB (SCORE MY CV Support Team) De Geersgatan 10 115 29 Stockholm, Sweden Email: hello@offwork.ai

We will gladly address your inquiries. Thank you for trusting SCORE MY CV with your career documents — we are committed to safeguarding your privacy every step of the way.