GDPR-compliant CV upload
Plain-English summary of how your CV data is handled. The full legal version is on the privacy page.
Reviewed by Anthony, founder · Updated
Your CV contains personal data. Under UK GDPR you have rights over how that data is used. Here's exactly what Sausage Dog does and doesn't do with it.
What we promise
We never train AI models on your CV.
We never sell or share your CV with third parties.
We never send your CV to recruiters or advertisers.
You can delete everything from /account at any time.
You can download a full copy of your data at any time.
Zero data retention at the AI provider (Anthropic) level.
UK/EU hosting for all stored data.
Encrypted in transit (HTTPS) and at rest (Neon Postgres).
The data flow
- 01
You upload your CV. Transmitted over HTTPS to our Vercel-hosted app (UK/EU edge).
- 02
We extract text. .docx and .pdf are parsed locally on the function instance, in memory.
- 03
We send to Anthropic. The text is sent to Claude via Anthropic's API for the rewrite. Anthropic does not retain or train on this data.
- 04
We return the rewrite. Result returned to your browser.
- 05
Storage (only if signed in). The CV, the job description, and the rewrite are saved to Neon Postgres so you can come back to them. If you're not signed in, nothing is stored.
Your rights under UK GDPR
Right of access. Download a full copy of your data from /account.
Right to erasure. Delete your account and all data from /account.
Right to rectification. Edit any saved CV or account detail from /account.
Right to object. Email hello@sausagedog.io to object to any processing.
Right to complain. You can complain to the Information Commissioner's Office (ICO) at any time.
Sub-processors
We use three sub-processors:
Anthropic. Claude API for CV rewrites. Zero retention. Privacy policy
Neon. Postgres database for signed-in users. UK/EU region.
Vercel. Hosting. UK/EU edge regions.
Use Sausage Dog without an account.
The free tier doesn't require sign-in. Your CV is processed in-memory and never stored. One tailored CV per day on the anonymous tier.
Frequently asked
Is my CV upload GDPR-compliant?+
Yes. Sausage Dog operates under UK GDPR. We process your CV as the data processor; you are the data controller of your own information. We have a lawful basis (legitimate interest and contract) to process the data for the purpose you uploaded it for.
What happens to my CV after I upload it?+
Free tier without sign-in: your CV is processed in-memory to generate the rewrite, then discarded. Nothing is stored. Signed-in users: your CV and rewrites are saved to your account on Neon (a UK/EU-hosted Postgres service) so you can come back to them. You can delete everything at any time from /account.
Do you train AI models on my CV?+
No. Your CV is never used to train any AI model. Ours or anyone else's. We send your CV to Anthropic's API for the rewrite; Anthropic's zero-retention policy applies, so they do not retain your data either.
Do you share my CV with third parties?+
No. We do not sell, share, or transfer your CV to recruiters, advertisers, or anyone else. The only third party that processes your CV is Anthropic, and only for the duration of the rewrite request.
How do I delete my data?+
Signed in: go to /account and click "Delete my account". This permanently removes your account, all stored CVs, all rewrites, and all associated records. You can also request a data export first. Not signed in: there is nothing stored to delete.
Where is the data hosted?+
Neon Postgres (UK/EU region) for stored data. Vercel for the web app (UK/EU edge regions). Anthropic API endpoints (US) for the rewrite, with zero data retention.
Can I get a copy of my data?+
Yes. Sign in and visit /account → "Download my data". You'll get a JSON file containing every CV, rewrite, and account record we hold for you. Under UK GDPR Article 15 you have a right to this within 30 days.