Privacy Policy

1. Who we are

MyCoverLetter (VAT BE1014.545.071, Meesjesweg 1, 8300 Knokke, Belgium) is the data controller for the personal data described in this policy. You can reach us at hello@mycoverletter.work for any privacy question or request.

2. What data we collect

We only collect what the service needs to work:

• Application details you enter: job title, company, location, the job description you paste, and your selected strengths, skills and achievements.
• CV content: if you upload a CV, we extract the text from it in order to generate your letter. We do not keep the original file.
• Contact details: your name, email address, and optionally your phone number, LinkedIn URL and the recruiter's name — these are printed on the letter itself.
• Account data: your email address is used to create and sign you into your account (passwordless — we never set or store a password) and to associate your generated letters with it.
• Payment data: handled entirely by Stripe. We never see or store your card number. We receive only the payment/subscription status and a transaction reference.
• Technical data: standard server logs (IP address, browser type, timestamps) generated by our hosting provider for security and reliability.

3. Why we use it and on what legal basis

• To generate and deliver your cover letter — performance of our contract with you.
• To process your payment and prevent fraud — performance of a contract and our legitimate interest in preventing abuse.
• To keep the service secure and working — our legitimate interest in operating a reliable service.
• To answer support requests — our legitimate interest in helping customers.

We do not sell your personal data, and we do not use it to train AI models of our own.

4. Who we share it with

We use a small number of processors, each bound by contract to handle your data only on our instructions:

• OpenAI — generates the analysis and the letter text. The job details, CV text and profile answers you provide are sent to its API. OpenAI does not use API data to train its models.
• Stripe — payment processing.
• Vercel — hosting and content delivery.
• Supabase — account/authentication and encrypted storage of your application details, generated letters and subscription status.
• Google — measures whether visits from our ads lead to a purchase. See the Cookie Policy for what it sets in your browser.

We may also disclose data where we are legally required to, or to establish or defend legal claims. Some of these providers are located outside the European Economic Area; such transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

5. How long we keep it

• Account data (application details, CV text, contact details, generated letters): kept for as long as your account exists, so your letters stay available on your dashboard. Email hello@mycoverletter.work to request deletion of your account and everything in it.
• Draft answers in your browser: stored only in your own device's local storage, never sent to us until you continue. Clearing your browser data removes them.
• Payment records: retained by Stripe and by us for as long as tax and accounting law requires.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on it. To exercise any of these, email hello@mycoverletter.work — we respond within 30 days.

If you are in the EEA or the UK and you believe we have mishandled your data, you also have the right to complain to your national data protection authority.

7. Security

Data is transmitted over TLS and stored with encryption at rest by our providers. Access is limited to what is needed to operate the service. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

8. Children

The service is not directed at anyone under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy as the service evolves. The "last updated" date above always reflects the current version, and material changes will be highlighted on this page.

10. Contact

Questions about this policy? Email hello@mycoverletter.work.