1. Who we are
Clever Clog is a CV analysis tool operated by dPaul Studio, a sole trader based in the United Kingdom. For UK GDPR purposes we are the data controller for the information described on this page.
Contact: david@dpaul.studio
2. What we collect
Things you give us
- Your CV. The file you upload and the text extracted from it. CVs routinely contain your name, contact details, work history, education and anything else you have chosen to put in them.
- Job adverts. The job description or posting you paste in, plus any company name we extract from it for research.
- Your email address, if you create an account. We sign you in with a one-time code sent by email, so there is no password to store.
- Anything you send us, including feedback, bug reports sent from the in-app reporter, and emails.
Things we generate
- Your match scores, gap analysis, rewrite suggestions, cover notes and company research.
- Your credit balance and a record of checks you have run.
Things collected automatically
- Basic technical data needed to serve the site: IP address, browser and device type, and pages requested. This is standard web server logging.
- Analytics data, but only if you accept analytics cookies. See section 6.
- Diagnostic events (which feature was used, whether it errored) used to fix faults.
A note on special category data. We do not ask for information about your health, ethnicity, religion, sexuality, trade union membership or political views. CVs sometimes contain it anyway — a disability disclosure, a religious school, a union role. If yours does, that information is processed only as part of the CV text you asked us to analyse, and we would rather you removed it before uploading.
3. Why we use it, and our legal basis
| What for | Legal basis |
|---|---|
| Running the CV check, rewrite, cover note and company research you asked for | Performance of a contract |
| Creating your account and signing you in | Performance of a contract |
| Saving your CV so it is there next time you sign in | Performance of a contract |
| Taking payment and allocating credits | Performance of a contract, and legal obligation for tax records |
| Preventing abuse of free checks and keeping the service up | Legitimate interests |
| Fixing bugs and improving the product | Legitimate interests |
| Analytics cookies | Consent |
| Replying to you | Legitimate interests |
Where we rely on consent you can withdraw it at any time, and where we rely on legitimate interests you can object. Section 9 explains how.
4. Your CV and the AI
Clever Clog cannot work without sending your CV somewhere. Here is exactly where it goes.
When you run a check, the text of your CV and the job advert is sent to Anthropic's Claude API, which produces the analysis you see. Anthropic processes it on our behalf as a sub-processor under their commercial terms. Under those terms, your inputs and the outputs are not used to train their models.
The company research feature additionally uses a web search tool to look up the employer you named. It searches for the company, not for you.
We do not sell your CV. We do not send it to recruiters, employers, job boards or advertisers, and we do not use it to build a profile of you for marketing.
7. How long we keep it
- Anonymous checks. If you use Clever Clog without signing up, your CV is held in your own browser's storage and on our servers only for as long as it takes to return the result. Clear your browser data and it is gone.
- Saved CVs. Kept while your account is open, so you do not have to re-upload. Delete a CV in the app and it is removed from our database.
- Account and credits. Kept while your account exists. Ask us to delete it and we will.
- Payment records. Kept for six years, because UK tax law requires it.
- Diagnostic and error logs. Kept for a short period while we fix the fault, then discarded.
8. Data outside the UK
Several of our providers are based in the United States, so your data is transferred outside the UK. Those transfers rely on the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or the UK extension to the EU–US Data Privacy Framework, depending on the provider. These are the safeguards UK law provides for exactly this situation.
9. Your rights
Under UK GDPR you can ask us to:
- give you a copy of the data we hold about you;
- correct anything inaccurate;
- delete your data;
- restrict or stop a particular use;
- hand your data over in a portable format;
- stop relying on legitimate interests, by objecting;
- withdraw a consent you previously gave, such as analytics.
Email david@dpaul.studio and we will respond within one month. There is no charge. We may ask you to confirm the email address on the account before acting, so that nobody else can delete your data.
No decision with a legal or similarly significant effect on you is made automatically. The AI scores your CV against a job advert; it does not decide whether you get the job.
10. Security
Traffic is encrypted in transit. Saved CVs sit in a database with row-level security, so your rows are readable only by your account. Sign-in uses one-time email codes rather than passwords. API keys stay server-side in backend functions and are never exposed to your browser.
Clever Clog is a beta product run by one person. It is built carefully, but no service can promise perfect security, and you should weigh that before uploading anything unusually sensitive. If we ever suffer a breach that puts your rights at risk, we will tell you and the ICO as required.
11. Children
Clever Clog is for people looking for work and is not aimed at children. Do not use it if you are under 16. If you believe a child has given us data, email us and we will delete it.
12. Changes to this policy
We will update this page when the product changes — a new feature, a new provider, a new use of your data. The date at the top always shows the current version. Significant changes will be flagged in the app or by email.
13. Contact and complaints
Questions, requests and complaints all go to david@dpaul.studio. Please try us first — most things are quicker to sort directly.
If you are not satisfied, you can complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.