Privacy Policy
Last updated: June 2026
About dropmycv
dropmycv is operated by an Australian individual and is subject to the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). dropmycv is intended for use in Australia. We do not target or actively market the service to individuals outside Australia. Where individuals outside Australia choose to use the service, we take reasonable steps to handle their information consistently with the APPs.
For privacy enquiries, contact: privacy@dropmycv.app
How your CV flows through dropmycv
Your device
CV opened & read in your browser
Stripped
Email, phone & links removed first
Matched
Text sent securely, ranked by AI
Discarded
Nothing stored — no profile
What information we process
When you use dropmycv, the following occurs:
- Your CV file (PDF, Word .docx, or plain text) is read locally in your browser using JavaScript. The file itself is never transmitted to our servers.
- PII stripping — before any text leaves your browser, dropmycv attempts, on a best-effort basis, to automatically remove common contact identifiers (email addresses, phone numbers, and web links) and replace them with placeholders. This automated stripping may not catch every format, so you should avoid including sensitive information you do not want processed. Your name, skills, and experience are preserved for matching.
- Extracted CV text (with contact identifiers already removed) is sent over an encrypted (HTTPS) connection to our server solely to perform job matching. This text is processed transiently and is not stored, logged, or retained after your results are returned.
- Your selected country is sent alongside the CV text to filter job search results geographically.
We do not retain your name, and contact identifiers such as your email address and phone number are stripped client-side before transmission on a best-effort basis. Your name is preserved in the CV text used for matching but is not stored or logged by us. We do not use cookies. We use privacy-preserving, cookieless analytics to count anonymous page views — see Analytics below.
How your information is used
Your CV text is used exclusively to:
- Extract a skills and experience profile using an AI language model
- Search for relevant live job listings via several third-party job search APIs
- Rank the job results by relevance to your profile
Once results are returned to your browser, your CV text is permanently discarded. No human at dropmycv reads your CV.
Third-party services and overseas disclosure
Processing your CV text requires disclosure to the following overseas services. Under Australian Privacy Principle 8, dropmycv takes reasonable steps to ensure these recipients handle your information in accordance with the APPs.
Anthropic (United States)
Your CV text is sent to Anthropic's API to extract your skills profile, rank job results, and — if you purchase an AI CV review — generate that review. Under Anthropic's API terms, inputs submitted via the API are not used to train its models, and Anthropic offers data-processing terms for international transfers. These are Anthropic's terms rather than commitments dropmycv can guarantee on Anthropic's behalf; please refer to Anthropic's current Privacy Policy and Data Processing Addendum.
Job search providers
A search query derived from your skills profile — your job titles, a few skills, and your selected location — is sent to the job search services below to retrieve live listings. None of these receive your raw CV text, your name, or any contact details. Each operates under its own privacy policy:
Vercel (United States)
dropmycv is hosted on Vercel and uses Vercel Web Analytics (see Analytics below). Vercel processes standard request data such as your IP address transiently in order to serve the site and provide cookieless, anonymous visitor counts. See Vercel's Privacy Policy.
Stripe (United States / Ireland)
If you purchase the optional AI CV review, your payment is processed by Stripe on Stripe's own checkout page. dropmycv never receives or stores your card details — they are handled entirely by Stripe. We only learn whether a payment succeeded. See Stripe's Privacy Policy.
Automated decision-making
dropmycv uses automated AI processing to extract a skills profile from your CV and rank job listings by relevance. No human reviews your CV or makes decisions about which jobs are shown to you. The results are informational only — you are not assessed, scored, or evaluated as a job candidate by dropmycv. All hiring decisions remain with the employers whose listings are shown.
Affiliate links
Job listings displayed on dropmycv may include affiliate tracking links. When you click “Apply Now”, you are directed to the original job listing on the employer's or job board's website. dropmycv may receive a referral fee from the job board if you apply. This does not affect the ranking of results, which is determined solely by AI-assessed relevance to your CV.
Analytics
We use Vercel Web Analytics to understand how many people visit dropmycv, which pages they view, and — in aggregate — which features get used (for example, that a match was run or a CV review was purchased). These feature events are anonymous and contain no personal data: never your CV, name, email, the location you typed, or any job content — only non-identifying signals such as a country code and coarse counts. It is privacy-preserving by design: it sets no cookies, stores no personal information, and does not use cross-site tracking or device fingerprinting. Visitor counts are derived from a hashed, non-identifying signal that rotates daily, so it cannot be used to identify you or follow you across sessions or websites. See Vercel's analytics privacy documentation.
We also keep a few anonymous running totals — how many searches and CV checks have been run across everyone, and how many job matches have been surfaced — which we sometimes display on the site. These are plain global counts only: they hold nothing about you, your CV, or any individual search, and cannot be tied back to a person. They are not your data — just a tally.
Security
We serve the site over HTTPS and take reasonable technical and organisational steps to protect information while it is in transit. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Children
dropmycv is intended for adults. It is not directed at anyone under 18, and we do not knowingly process the personal information of minors.
Your rights
Because dropmycv does not store any personal information, there is no data to access, correct, or delete. Each session is entirely stateless.
If you have a concern about how your information is handled, contact us at privacy@dropmycv.app. You may also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. dropmycv is the operator responsible for this service; your point of contact for any privacy concern is us.
Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of dropmycv after any changes constitutes acceptance of the updated policy.