PRIVACY NOTICE
How we use your information
Last updated: 14 October 2026
Charta Recruitment Ltd is the data controller for the Charta Sales CV AI Coach. Contact us at david@chartarecruitment.co.uk.
Information we process
When you use the free CV rater, we process the text and formatting information extracted from your CV so we can produce your rating. When you reveal the report, we store your first name, last name, email address, overall score, sales-content score, CV Format score, submission date and whether you chose to receive marketing.
We also record anonymous funnel events such as page visits, CV upload attempts, completed ratings, report unlocks and technical failures. These records may include a temporary browser-session identifier, referral source, campaign tags and rating scores. They help us understand where the rater works well and where users leave the process.
We do not store your uploaded CV file or its extracted text in our lead database. We store the assessment produced by the rater so you can reopen it through a private, unguessable report link emailed to you.
If you use the CV builder and choose to save your progress, we store the questionnaire answers, career timeline, contact details and generated draft under a private random return link. The uploaded source file itself is not retained. Saved builder drafts expire after 45 days unless the service later provides a longer customer revision period.
Why we use it
We process your CV to provide the rating you requested. We store the contact and score information to operate the service, understand its use and keep a record of the report request. Our lawful basis for these activities is taking steps at your request and our legitimate interests in operating and improving the service.
If you tick the optional marketing box, we may email practical sales CV advice and information about the Charta Sales CV AI Coach. Our lawful basis for those messages is your consent. The free report is available whether or not you consent, and every marketing email includes an unsubscribe option.
AI processing and service providers
The extracted CV text is sent securely to OpenAI through its API to create the content assessment. OpenAI states that API data is not used to train its models unless the customer opts in. Its standard abuse-monitoring logs may retain customer content for up to 30 days. We set the assessment request not to store response application state.
We also use Cloudflare for website hosting and database services, Stripe to process payments, and Lemlist to deliver consented email communications and service emails. These providers process information under their own security and data-protection arrangements and only for the services they supply to us.
How long we keep it
We keep stored lead and funnel-performance records for up to 24 months and then delete or anonymise them unless we need them for a legal obligation or an ongoing customer relationship. Private rating-report links expire after 90 days. Saved builder drafts and their private return links expire after 45 days. The anonymous session identifier held in your browser expires when that browser session ends. If you withdraw marketing consent, we will stop marketing and may keep the minimum suppression record needed to honour your request.
Your rights
You may ask for access to your information, correction, deletion, restriction or portability, and you may object to processing based on legitimate interests. You can withdraw marketing consent at any time without affecting earlier lawful processing.
Contact david@chartarecruitment.co.uk to exercise your rights or ask a privacy question. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.