Privacy policy

Coffee & Excel (“we”) is the data controller for the information described here. We’re based at 74 Beechwood Avenue, Lower Ranelagh, Dublin 6, Ireland.

For anything about your data, email privacy@coffeeandexcel.com. We reply within one month, usually much sooner.

Your account: your email address and password (stored only as a secure hash by our sign-in provider). If you sign in with LinkedIn, LinkedIn shares your name, email address and profile photo. We don’t receive your work history that way, and we never post to LinkedIn.

Your CV and career information: the CV files you upload, the lines we read from them and the ones you confirm or edit, your name, headline, location and contact details, qualifications, where you can work and the languages you work in (if you tell us), and anything you add from a LinkedIn data export (we read only the profile files and don’t keep the export).

Your job search: job adverts you paste, the requirements we read from them, tailored CVs, cover letters, follow-up emails we draft, interview questions, your typed answers and the feedback on them, career plans, LinkedIn drafts, prep packs and the notes, dates and statuses you record for each application.

Payments: your plan, subscription status, invoices and credit balance. Card details go straight to Stripe; we never see or store them.

Using the site: records of what was done in your account (for security, billing and support), the emails we’ve sent you, and your cookie and AI-help choices. The free tools that work without an account count daily use with a one-way hash of your connection, not your IP address itself. With your consent only, Google Analytics measures visits; see our cookie policy.

Please don’t upload information about health, beliefs or other special categories, or anyone else’s personal details, unless they’re genuinely part of your CV.

To provide the service you asked for (performance of a contract): reading your CV, checking it against jobs, writing tailored CVs, letters and follow-ups, interview practice, downloads, your account and plan, and service emails such as receipts, plan changes and failed payments.

With your consent: analytics cookies. You can change your choice at any time from the cookie settings link in the footer.

For our legitimate interests, balanced against yours: keeping the service secure, preventing abuse and fraud, fixing faults and understanding, in aggregate, which features help people. You can object; see “Your rights”.

To meet legal obligations: keeping accounting and tax records of payments.

We don’t sell your information, use it for advertising, or send marketing emails.

Several features send relevant parts of your information (CV lines, a job advert, your answers) to AI providers to produce what you asked for. We send only what the task needs, ask providers not to retain it beyond their own short abuse-monitoring period, and they don’t use it to train their models. Every suggestion is checked against the facts you confirmed, and nothing is added to your CV until you accept it.

AI help is on when you sign up and you can turn it off at any time in your Privacy settings. Features that need it then stop until you turn it back on.

We don’t make decisions about you that have legal or similarly significant effects. Checks of your CV against a job are information for you, never a hiring decision or a probability.

We use these providers, each under a contract that limits them to acting on our instructions:

• Supabase: database, sign-in and private file storage, in Ireland (EU).
• Vercel: website hosting.
• Railway: our document service (reading CVs and producing downloads) and background jobs.
• OpenAI: AI models for reading adverts, tailoring, letters, interview practice and the other writing features.
• TypeSafe: checks that suggested wording is supported by your own CV lines.
• Stripe: payments, subscriptions, invoices and receipts.
• Resend: sending account and service emails.
• Google: Analytics, only if you accept analytics cookies.
• LinkedIn: sign-in, only if you choose to sign in with LinkedIn.

Some of these providers process data in the United States. Where they do, the transfer is protected by the EU–US Data Privacy Framework (and its UK extension) or the European Commission’s standard contractual clauses. Email us for details of the safeguard for a particular provider.

We keep your account and everything in it while your account is open, so your CV, jobs and history are there when you come back.

When you delete your account (Privacy settings → Delete my account), we cancel any subscription and permanently erase your account, files, CV lines, jobs, letters, interview answers and everything else linked to it, straight away. Copies in our database provider’s daily backups are gone within 7 days. We keep only a one-way hash recording that an erasure happened.

Records of payments (invoices, amounts and dates, no longer linked to your account) are kept for 6 years, as Irish tax law requires.

You can ask to access, correct, export (portability), delete or restrict your information, object to processing based on legitimate interests, and withdraw consent at any time. Much of this you can do yourself: edit anything in your workspace, download your data from Privacy settings, and delete your account there. For anything else, email privacy@coffeeandexcel.com.

If you’re unhappy with how we’ve handled your information, please tell us first. You can also complain to the Irish Data Protection Commission (dataprotection.ie) or, in the UK, the Information Commissioner’s Office (ico.org.uk).

Your files are stored privately and only you can open them while signed in. Connections are encrypted, access to our systems is restricted, and every change to your CV is recorded so it can be traced and undone. No system is perfectly secure; if a breach affected your information, we would tell you and the regulator as the law requires.

Coffee & Excel is for people aged 18 and over. We don’t knowingly collect information from anyone younger.

If we change how we use your information, we’ll update this page and its date, and email you before any significant change takes effect.