English · Français · Deutsch · Español
What we store, what never leaves your browser, who else sees any of it, and how to delete all of it. Last updated 29 September 2026.
The short version. Your CV is read, scored, checked and rebuilt inside your own browser. That text is not uploaded for any of those steps. Three things do leave your device once you have an account: your resume itself, so that signing in on another computer opens the resume you already wrote rather than an empty page; the documents you save to your account; and — only when you press a button that says so — the specific sentences an AI model is asked to rewrite. We have never sold anything to anybody, there is no advertising on this site, and one button deletes every row we hold about you.
Involve is operated by Aditya Shashidhar. For anything in this policy, including a request to see or delete your data, write to [email protected]. Under the UK and EU GDPR we are the data controller for the personal data described here.
This matters more than anything else in this document, so it is first. The following run entirely on your own device, in JavaScript, on the page you have open. The text of your CV is not transmitted to us or to anyone else in order to do them:
If you use Involve without an account, and without asking for an AI rewrite, your CV never leaves your computer at all. With an account, your resume is saved to it — see the next section for what that means and why.
Only once you create an account. Each row belongs to you and is readable only by you, with four exceptions that are described below: a coach you book can read your request; a coach's own profile is shown to students; an interview experience you post is shown to other users; and if your account is linked to a school licence, the school's careers office sees your activity figures. Everything else is enforced in the database itself, per row, not just in the interface.
| What | Why it exists |
|---|---|
| Your name, email address and the profile you fill in | To have an account, and to fill application forms with the details you gave us |
| Your resume, as text | So that signing in on a second computer opens the resume you have already written and corrected, instead of asking you to find the file again. It is your own words, not our rewriting of them. The file you uploaded is still never stored — only the text taken out of it |
| How you have asked your resume to look — which country it is going to, which language it is written in, the layout, the typeface, the page length, the sections you have turned off | So the same resume comes out the same way on every computer you sign in on. Your photograph is not part of this: it is never uploaded, so a new computer asks you to attach it again |
| Documents you generate and save | So the CV you sent to an employer can be opened again, and so a tailored version is not rebuilt differently later |
| Answers you type to gap questions | So you are not asked the same thing twice, and so a claim on your CV can be traced to something you actually said |
| Jobs you track and applications you record | The tracker |
| Which plan you are on, and your usage against its allowances | Billing and caps |
| Product events — a step reached, a button pressed | To find out which parts of the product are broken |
| Seconds you spend in each area of the app, per day | To show you your own time, and to give a school licence holder its view. See Time spent in the app |
| People you add to your contacts or to a tracked job | Your networking list and tracker. See People you add |
| Your dream job card | So the card is still there when you come back. See Dream job card |
| Interview experiences you post | To show them to other students. See Interview experiences |
| Coach bookings you make | To pass your request to the coach. See Coach bookings |
| If you are a coach: your profile and your busy times | To list you and to offer students free slots. See If you are a coach |
| Which version of the terms you accepted, and when | As a record of your agreement. See Terms acceptance log |
We do not store your card details. We never have — see Payments below.
Five things in this product ask a language model for help. Every one of them is a button you press; none of them runs on its own.
| When you press | What leaves your browser |
|---|---|
| Rewrite this line | The line being rewritten, and the job title and employer it is being written against. Twenty lines at most in one go. |
| Draft this message | The message our own template already wrote from your CV, in paragraphs, to be made to read less like a machine. |
| Translate my CV | Every sentence of the body — your summary, your bullet points, your skills and your qualification titles, twenty at a time until the document is done. This one is the whole document's text, and it is the reason this table exists. |
| Let the extension prepare an application | The posting, the bullet points from your CV that answer it, and the drafts our own code produced for the letter and the "why you" box. |
| Check my grammar (interview practice) | The text of that one spoken answer, as your browser turned it into words, and the question it answers. Not the audio. |
What never leaves in any of them: the file you uploaded, your email address, your phone number, your links, and the parts of your CV the feature does not need — a rewrite of one bullet carries one bullet, not the document around it. A translation is the exception and it is named as one above.
Where it goes: the first three and the fifth are sent to a workflow we operate on n8n Cloud, which passes the text to OpenRouter and returns the answer. The fourth is sent to our own server function, which calls OpenRouter directly. OpenRouter routes to the model doing the work: today that is Anthropic's Claude for the first three, and DeepSeek for the fourth and the fifth (Anthropic's Claude Haiku if DeepSeek is down). For DeepSeek we tell OpenRouter to use only hosts that do not keep or train on the text. Your session token goes to that workflow and to that function — both of them ours — so they can check that your account is allowed to press the button. It is never passed on to OpenRouter or to the model: they are sent the text and no detail that identifies you. What each of those companies does with text sent to it is governed by their own terms, which we link to rather than paraphrase.
What comes back is checked before you ever see it: any figure, employer or proper noun that was not already in your own sentence is rejected. That check is the reason this product exists, and it runs on the way back regardless of what the model returned.
If you never press those buttons, no data about you is sent to a model.
When you add a person to your networking list, or a hiring manager, point of contact or referrer to a tracked job, you enter personal data about a third party: usually a name, a company, a role, a work email or a profile link, and your own notes.
The card holds the company, role, city, reasons and dates you enter, any job advert you paste in and the steps you tick off. It is private. It is shared with a coach only if you press the share button on it, and only with the coach you are sharing it with at that moment. A school never sees it.
When you post an experience, we store the company, role, country, month, rounds, questions, difficulty, outcome and tips you wrote, and whether you chose to post it by name or anonymously.
When you book a coach, we pass the coach your name, your email address, your request (the topic and your message) and the time you picked. If you choose to include it, we also pass a summary of your search. No other detail about you is shared with the coach.
If your account is linked to a school licence, the school's careers office can see your activity figures, per student. That is the reason school licences exist, so we say it plainly here.
When you accept the terms, we record the version you accepted, the date and time, and the language you were reading. We keep it as proof of what you agreed to. Lawful basis: legitimate interests, in being able to show what was agreed.
Sign-in is through Google or Microsoft. We do not ask for, set, or store a password. Those providers tell us your email address, your name and a stable identifier, and no other details. We do not receive access to your mailbox, your files or your contacts.
Payments are taken by Stripe on Stripe's own pages. Your card number is entered on Stripe, held by Stripe, and is never sent to us or through our servers. What we receive back is that a payment succeeded and which plan it was for.
The extension exists to fill in application forms and to score a job you are looking at. It is strict about what it may touch, and the rules below are enforced in its code, not only stated here:
The extension does not track your browsing, does not collect analytics, and sends no data to any third party other than the Involve account you are signed into.
The database is hosted by Supabase in Paris, France
(eu-west-3), and the server functions that talk to it run there too. The site itself is
served by Cloudflare. The workflow that
carries the AI rewrites runs on n8n Cloud, and the models
themselves are reached through OpenRouter — both are
named here because text you wrote passes through them, which is the only test that matters for this
list. Where a provider processes data outside the UK or EEA, that transfer relies on the UK Addendum
and the EU Standard Contractual Clauses.
Sign in, open your account page, and choose to delete your data. It removes every row that holds anything you wrote — your tracked jobs, your applications and their history, your saved documents, your answers, your networking contacts and the people you added to tracked jobs, your dream job card, the interview experiences you posted, your coach bookings, your time records, your terms acceptance log, the product events recorded against you, and your profile — in one transaction, so it either all goes or none of it does, and it is not reversible. Three things are left behind and all are named here: the usage counters described above, which hold numbers and no text; if you used or shared an invite link, an anti-abuse record (a scrambled code of your email address, how many invite credits you earned, and a scrambled code of any CV that earned one, so one account cannot delete and claim again); and any refund claim you have raised, because a claim is a payment record and payment records are kept for as long as tax law requires. Ask us to delete the account itself and the counters and the invite record go too. If you would rather ask us to do it, write to [email protected] and it will be done within 30 days.
You can also delete a single saved document, a single tracked job or a single answer, at any time, without deleting anything else.
Under the UK and EU GDPR you may ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, and object to processing. Write to the address above. If you are not satisfied with our answer, you can complain to the UK Information Commissioner's Office or to the CNIL in France.
Involve is for people looking for work and is not intended for anyone under 16. We do not knowingly collect data from children.
If this policy changes in a way that affects what we do with your data, we will say so on this page and change the date at the top. The date at the top is the date the current version took effect. This policy is also published in French, German and Spanish. If the versions differ, the English one applies.