Privacy Policy
Last updated: not yet published
Draft: some company details are still being added (shown in [brackets]). This text will be reviewed by a UAE lawyer before AlphaCV opens to the public.
This policy explains what personal data AlphaCV collects, why, how long we keep it, who we share it with, and the rights you have. We have written it to describe exactly how AlphaCV works today. If anything changes, we will update this page and tell registered users about important changes before they take effect.
1. Who we are
AlphaCV is operated by [Legal company name], trade licence [Trade licence number] issued by [Licensing authority], registered at [Registered address], United Arab Emirates ("AlphaCV", "we", "us"). We are responsible for your personal data under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
For any privacy question or request, email [Privacy email].
2. What AlphaCV does
AlphaCV is a software tool for job seekers. You upload your CV, choose the kinds of UAE companies you would like to work for, approve an application email, and connect your own email account (Gmail, Outlook / Hotmail or Zoho Mail). AlphaCV then sends your application to matching companies from your own email address, on your behalf. Replies go to your own inbox. AlphaCV is not a recruitment agency and does not make hiring decisions.
3. The personal data we collect
| Data | Why we need it |
|---|---|
| Your name, email address and WhatsApp number | To create and protect your account. We confirm the email and number with one-time codes. |
| Your CV (the file and the text we read from it) | To suggest job titles, write your application email, check that the CV is yours, and attach it to your applications. |
| Your campaign choices (role, industries, emirates, excluded companies, emails per day) and your email text | To choose companies and send your applications. |
| The connection to your email account | To send emails on your behalf. We store only the access key your provider gives us, encrypted. |
| A record of each email sent (company, date, subject and text) and the feedback you give (replies, interviews, bounces) | To show you your Sent page, avoid emailing a company twice, and keep our business list accurate. |
| Payments, wallet and free emails | To charge you correctly and keep your wallet balance. |
| Technical records: login sessions, a scrambled fingerprint of your internet address when you upload a CV without an account, and a log of important account actions | To keep your account secure, prevent abuse and investigate problems. |
We do not collect more than we need. We do not use advertising trackers or analytics cookies, and we never sell personal data.
4. Why we are allowed to use it
- To provide the service you asked for (your account, CV and campaigns): processing is necessary to perform our agreement with you.
- Your consent, which you give when you create your account and which you can withdraw at any time, for example for keeping your CV after a campaign ends.
- Legal obligations, for example keeping payment records for accounting and tax purposes.
5. Your email account
- AlphaCV asks only for permission to send email on your behalf.
- Zoho Mail also requires permission to read your account details (your address and account number), which are needed to send. This does not include your emails.
- AlphaCV cannot read, delete or see any email in your mailbox.
- You can disconnect at any time in AlphaCV, or in your Google, Microsoft or Zoho account settings.
AlphaCV's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The same limits apply to Microsoft and Zoho access: data obtained through your email connection is used only to send the application emails you approve. It is never sold, never used for advertising, and never used to train AI models.
6. Automated writing and checks
We use artificial intelligence (Anthropic's Claude) to suggest your application email from your CV and to tailor it for each company. You review and approve the email before anything is sent. We also run automatic checks on CVs and emails (for example for viruses, contact details and spam-like wording), and our team may review flagged items. None of these produce decisions with legal effects on you; you can always ask a person at AlphaCV to look again.
7. Who we share data with
We share personal data only with service providers that help us run AlphaCV, and only what each one needs:
| Provider | What for | Where |
|---|---|---|
| Our hosting provider | Runs the website and stores the database | [Hosting country] |
| Cloudflare | Protects the website and stores encrypted CV files | Global network |
| Anthropic | Writes and tailors your application email from your CV text | United States |
| Google, Microsoft or Zoho (the one you connect) | Sends your emails from your own account | According to your account |
| Our email and WhatsApp code providers | Deliver your one-time login codes | According to the provider |
| Our payment provider | Takes card payments (we never see or store your full card number) | According to the provider |
The companies you apply to receive what you choose to send them: your application email and your CV, from your own email address.
We may disclose data if UAE law or a competent authority requires it. If AlphaCV is ever sold or merged, your data would move only under the same protections, and we would tell you first.
8. Data stored or processed outside the UAE
Some providers above process data outside the UAE (for example Anthropic in the United States). We only use providers that give appropriate protection for personal data, and we transfer data abroad only as permitted by the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. You can ask us for details of these protections at [Privacy email].
9. How long we keep data
- A CV uploaded without creating an account: deleted automatically within 24 hours.
- Your CV: deleted 90 days after your campaign ends, unless you have chosen to keep it for future campaigns. You can change this on the My CV page, or remove a CV at any time.
- Your account and campaigns: kept until you delete your account. Deleting it removes your profile, CVs, campaigns, sent-email records and wallet.
- Payment records: kept for as long as UAE accounting and tax law requires, with the link to your name removed once your account is deleted.
- One-time codes: stored only as scrambled fingerprints and valid for minutes.
- Email addresses you connected: remembered after you disconnect, only to stop the same address being used by two accounts. Our team can release it on request.
10. How we protect it
- CV files and email access keys are encrypted. Login codes and sessions are stored only as scrambled fingerprints.
- All connections to AlphaCV use encryption (HTTPS).
- Only authorised AlphaCV staff can see account data, each limited to their role, and important actions are logged.
- The companies you apply to never see other job seekers, and job seekers never see companies' email addresses.
No system is perfectly secure. If a breach affecting your personal data happens, we will inform you and the UAE Data Office as the law requires.
11. Your rights
You can ask to access, correct, delete or move your data, restrict or object to how we use it, and withdraw consent. See Your data rights for how to do this. If you are not satisfied with our answer, you can complain to the UAE Data Office.
12. Information about companies
AlphaCV keeps a list of UAE companies and the contact addresses they publish for job applications. How we handle that information, and how a company can pause or stop applications, is explained on For businesses.
13. Age
AlphaCV is for people aged 18 and over. We do not knowingly collect data from anyone younger.
14. Contact
Privacy questions and requests: [Privacy email]. Other questions: [Support email].