Privacy
How Quaverix handles your personal data: what we store, why, who processes it, and how long we keep it. Your data is held in the United Kingdom / European Economic Area, and you can delete your account from your dashboard at any time.
Your assessment data
When you take the assessment, we collect and store your answers to the assessment questions; the optional background and experience details you enter; your scores, archetype and generated report; and records of your purchase. Payments are handled by our payment providers (such as Stripe and PayPal) and we do not store your card details.
We use this information to create and deliver your report, to provide your dashboard and the other tools included with your purchase, to respond to support requests, and to keep records of your purchase. We rely on the fact that this is necessary to provide the service you have asked for (performance of a contract).
Your report is generated using automated processing, including AI, from your answers. The assessment is a career-planning tool. It is not a psychological, clinical or medical assessment and it does not diagnose any condition.
The background and free-text fields are optional. Please do not enter sensitive information such as health details, religion or political views. We do not ask for it and do not need it.
We may combine assessment results and remove your name, email address and free-text answers so that the data no longer identifies you. We use this anonymised data to understand how the assessment performs, to improve it and to produce aggregate statistics. Anonymised data is not personal data.
We use service providers to host our systems and to write your report, including AI services. They may process your answers only on our instructions and only to provide the service. Our agreements with our AI providers do not allow them to use your data to train their models. Some of these providers are located outside the country where you live. Where that is the case, we put in place the safeguards the law requires.
We keep your answers, scores and report for as long as your account is open. If your account is inactive for 24 months, we may delete or anonymise the information in it. You can delete your account, and the information in it, from your dashboard at any time.
Version 1.0.0 · effective 2026-10-04
Your CV Builder data
When you upload or create a CV, we store the CV and the information in it in your account. This can include your contact details, work history, education, skills and anything else you choose to include. We use this information to provide the CV Builder to you: to display, edit, score, analyse and export your CVs, and to generate suggestions and rewrites. We rely on the fact that this is necessary to provide the service you have asked for (performance of a contract).
Please include only information you are comfortable storing with us. We do not ask for sensitive information such as health details, and you should leave it out of your CV unless you need it there.
We use service providers to host our systems and to run automated analysis of your CV, including AI services. They may process your CV only on our instructions and only to provide the service. Some of these providers are located outside the country where you live. Where that is the case, we put in place the safeguards the law requires.
We keep your CVs for as long as your account is open. If your account is inactive for 24 months, we may delete or anonymise the information in it. You can delete any CV, or your whole account, from your dashboard at any time.
Version 1.0.0 · effective 2026-10-04
Who else processes your data
Some parts of the service are provided by other companies acting for us, and the full list is below with what each one receives. We share the minimum each needs and nothing more, every one of them holds the data in the United Kingdom or the European Economic Area, and none of them is permitted to use it for their own purposes except where noted. The service itself, with its database and stored files, runs on our own server in Helsinki, Finland, in the European Union. Two things people often expect to see here are deliberately absent. We use no geolocation service: your approximate country is looked up on our own server from your connection's IP address, using a locally held copy of the DB-IP country database, and your IP address is not stored. And we use no document-parsing service: the text of a CV you upload is read on our own servers by software running there, so the file itself is never sent to a third party to be processed. The only outside company that sees the content of your CV is the AI provider named below, and only to produce the analysis you asked for.
Anthropiceu-west-1 (Ireland) · acts only on our instructions- Generates the written narrative of an assessment report, and the CV analysis and rewrite suggestions. Assessment answers and scores, or CV text and a target job description. Never your name, email or payment details.
Stripeeu-west-1 (Ireland) · independent controller- Takes payment and issues receipts. Payment details, which are entered on Stripe's own checkout page and never reach Quaverix. We receive only a payment reference, the amount and the outcome.
Resendeu-west-1 (Ireland) · acts only on our instructions- Sends transactional email — sign-in links, receipts, your report. Your email address and the content of the message.
Hetznerhel1 (Helsinki, Finland) · acts only on our instructions- Provides the server in its Helsinki data centre that runs the application, its database, file storage and backups. Your account, assessment and CV records and your stored files are held on the server and disks Hetzner operates. Hetzner provides the infrastructure only and does not use the data for its own purposes.
Databaseon our own servers · no third party- Your account, assessment and CV records are held in a PostgreSQL database running on our own server.
File storageon our own servers · no third party- Report PDFs and any CV file you upload are stored on our own server's disk, not with a separate storage company.
Background jobson our own servers · no third party- Report generation, delivery and scheduled emails are queued and run by job-scheduling software on our own server. Job data is not sent to the software's maker.
CV and LinkedIn PDF text extractionon our own servers · no third party- Reads the text out of a PDF you upload. Runs on our own servers; the file is not sent to any third party to be parsed.
Word document text extractionon our own servers · no third party- Reads the text out of a .docx you upload. Runs on our own servers; the file is not sent to any third party to be parsed.
Country detectionon our own servers · no third party- Your approximate country is looked up on our own server from your connection's IP address, using a locally held copy of the DB-IP country database (IP Geolocation by DB-IP, CC BY 4.0). No external geolocation service is called. Your IP address is not stored: a keyed one-way hash of it is kept for about a day to limit repeated requests, and is retained in our security log only if a limit is exceeded. IP Geolocation by DB-IP
Version 2.0.0 · effective 2026-10-08
How long we keep your data, and backups
We keep personal data only as long as we need it. Most of your data is kept for as long as your account is open. If your account is inactive for 24 months, meaning you have not signed in or used a tool in that time, we may delete or anonymise the information in it.
You can ask us to erase your account at any time from your dashboard, and when you do the deletion covers your records and your stored files together, in one operation, rather than leaving one behind. We also take backups, because losing your report would be worse than any of this: the database and your files are copied every night, and those copies are checked by restoring them. Backups are held for a limited period and are then destroyed on a rolling basis. Erasing your account removes it from the live service immediately; any copy still held in a backup is removed as that backup ages out. If we ever have to restore the service from a backup, we erase again every account whose erasure was made after that backup was taken, before the service is reopened.
Your account and everything in it- Kept while your account is open. If you have not signed in or used a tool for 24 months, we may delete or anonymise it. Your report PDF is yours to download and keep.
Your account, assessment and CV recordsHelsinki, Finland (EU)- A full copy of the database is taken every night at 03:00 UTC and kept for 14 days. A copy is restored and checked every Sunday.
Your report PDF and uploaded CV filesHelsinki, Finland (EU)- Copied every night at 03:00 UTC and kept for 14 days. Report PDFs can also be regenerated from the stored report data, so a lost file is never a lost report.
The server as a wholeHelsinki, Finland (EU)- A daily image of the server's disk, kept for 7 days by our hosting provider.
Where backups live- Every backup stays in the same UK or EU region as the data it came from. No copy is made outside that region.
Version 3.1.0 · effective 2026-10-09
Deleting your information and our records
When you delete a CV or your account, we remove the information from our live systems. Deleted information may remain in our backups for a limited period before it is overwritten. We keep records of purchases (such as the date, amount and receipt number) for as long as the law requires for tax and accounting purposes, even if you delete your account. To access, correct or delete your information, or to exercise any of your other rights, email hello@quaverix.com.
Version 1.0.0 · effective 2026-10-04
These are the terms the platform operates under today. The final, full policy documents are published at production go-live with our verified domain. Questions: hello@quaverix.com.