01 · Privacy

Privacy policy

Last updated: 16 August 2026 · For the live product at mychapter.me

MyChapter ("we") provides AI-assisted CV and application tools. This policy explains what personal data we process and why. We are the data controller for account and CV data you submit.

02

What we collect

• Account details (email, name, authentication identifiers).
• CV files and text, writing samples, voice profiles, job descriptions, applications, and related workspace content you create.
• Usage and billing metadata (plan, counters, Stripe customer IDs — payment card data is handled by Stripe, not stored by us).
• Technical logs needed to operate the service (including AI call telemetry without selling your CV content).

03

Why we process it

To provide the service you request (contract), to secure and improve the product (legitimate interests), and where required by law. CVs may contain sensitive personal data — we process them only to deliver the features you use.

04

Sub-processors

We use providers such as Supabase (database/auth/storage), OpenRouter and underlying model providers (AI generation), Stripe (payments), and our hosting provider (e.g. Vercel). We require appropriate data processing terms where applicable.

05

Your rights (UK GDPR)

You can access, correct, export, or delete your data from Settings, or email support@mychapter.me. You may also complain to the ICO.

06

Security of your data

• Passwords are stored by our authentication provider (Supabase Auth), not in the same tables as your CV and application content.
• Database access for your content is restricted with row-level security so other customers cannot read your rows.
• Connected Gmail credentials are stored separately from your profile and are not available to coaches or other users of the app.

07

Retention

We keep your account data while your account is active. When you delete your account we remove personal data from production systems, including uploaded CVs, interview recordings where stored, and AI call logs tied to your account, subject to short operational backups and any legal retention needs (for example billing records held by Stripe).

Typical targets: account erasure from the live database promptly after you confirm deletion; backup media rotated on the hoster's schedule (commonly within 30 days). Exact backup windows depend on Supabase / hosting configuration.

08

Cookies

Essential cookies keep you signed in and protect the service. Optional analytics cookies help us understand how the product is used. We do not sell personal data. You can change your choice below at any time — the same controls appear on the first visit and in Settings when you are signed in.

09

Operators (ops checklist)

Running MyChapter as a business still requires organisational steps outside this app: UK ICO registration where required, data processing agreements with sub-processors, staff access controls, and a written retention schedule. The product features support your rights; they do not replace that compliance work.

This summary is not legal advice. We will refine it as the product and processor list mature. Last updated: 18 August 2026.