Privacy notice
Last updated 12 November 2026. Plain English, kept short.
Who we are
This site is run by J. Chisholm, a sole trader trading as Neatsums, who is responsible for your data. Email: hello@neatsums.co.uk.
What we collect
This site doesn't ask for an account or personal details, and doesn't use tracking or advertising cookies. Our hosting provider, Cloudflare, processes basic technical data (such as IP addresses) to deliver and protect the site.
If you email us, we keep your email and our reply so we can help you, and delete them when they're no longer needed. We don't sell or share them.
When you use the tool
What: your CV, which usually shows your name, contact details, work history and qualifications; your answers to our questions, which may mention things like a career break or caring for someone (you don't have to give health details); and a job advert, if you add one. A UK CV doesn't need your date of birth, National Insurance number or a photo, so leave them out if you like: we tell the AI not to copy them into the new CV.
Why: to read your CV, ask you questions and write the new CV, because you asked us to. We don't store your CV, your answers or the new CV: they go straight back to your browser, and the PDF and Word files are made on your own device.
Who reads it: our AI provider, Anthropic, reads your CV, the advert and your answers, and writes the new CV. Under its terms Anthropic may not use them to train its models, and deletes them within 30 days (longer only if they're flagged for breaking its usage policy, or the law requires). Cloudflare, our hosting provider, passes them through.
Outside the UK: Anthropic may process your file in the US. That transfer is protected by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, which forms part of Anthropic's data processing terms.
Usage limits: to limit free use, we keep a scrambled (hashed) form of your internet (IP) address for up to 2 days, with a count of the CVs read and written for it that day. We also keep overall counts of finished CVs and downloads, with no personal details.
Sensitive details
A CV or an answer can show things like health, a disability, religion or trade union membership. You don't need to include any of them, and we tell the AI to leave health and religion out of the new CV. If your CV or answers include them, we use them only to write your CV, with your explicit consent, which you give by ticking the box before you upload (UK GDPR Article 9(2)(a)). You can stop at any time by closing the page: we keep nothing, and our AI provider deletes it within 30 days.
Your CV in your browser
While you work, your CV is held in the page in your browser. If you go to pay, the new CV is also kept in this browser tab (session storage), so it's still there when you come back from Stripe. It's deleted when you close the tab or start a new CV. We never receive this copy.
If you buy credits
Payments are handled by Stripe, which collects your card details (we never see them) and your email address for the receipt. We keep a record of the payment, linked to a random key stored in your browser, and a random number for the CV it unlocked (not the CV itself). We keep payment records for six years because the law requires it for tax.
Our legal reasons
We read your files and provide credits to carry out our agreement with you. We keep the hashed IP address to keep the free version fair and affordable, and reply to emails, because we have a legitimate interest in doing so; you can object by emailing us. We keep payment records because the law requires it.
Your rights and complaints
You can ask to see, correct or delete your data by emailing hello@neatsums.co.uk. To complain about how we handle your data, email us: we'll acknowledge it within 30 days and tell you what we've done. You can also complain to the Information Commissioner's Office.