GDPR

BylineCV is committed to complying with the General Data Protection Regulation (GDPR). This page explains your rights as a data subject and how to use them. Our Privacy Policy describes what we collect and why.

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can correct your details and documents in your workspace, or ask us to correct them.
• Right to erasure: You can delete your account in Settings, which permanently removes your profile, CVs, and cover letters. You can also ask us to do this for you.
• Right to restriction: You can ask us to limit how we process your data.
• Right to data portability: You can export your CVs and cover letters, or ask us for your data in a structured, machine-readable format.
• Right to object: You can object to processing based on our legitimate interests.

• Contract: Processing needed to provide the service you signed up for, including your account, documents, and the AI features you choose to use.
• Legitimate interests: Keeping the service secure and preventing abuse.
• Legal obligation: Keeping records where the law requires us to.

Some of our service providers, including OpenAI for AI features, may process data outside the EU/EEA. Where they do, we rely on appropriate safeguards such as Standard Contractual Clauses.

For any GDPR request or concern, email us at hello@bylinecv.com from the address linked to your account. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.