Privacy Policy

ThinkStack Recruitment, a service of ThinkStack Limited in Ireland, is the controller for the personal data described in this policy. This page explains how we collect, use, store, and disclose personal data when you use our CV polish service. Board/legal review is still required on the precise legal-entity name and registered address wording.

Data we collect

• Your name, email address, and any other contact details you provide.
• Your CV file, LinkedIn URL, target role brief, notes, and follow-up answers.
• Order, delivery, support, amendment, and email-thread records linked to your order.
• Payment and transaction metadata from Stripe. We do not store full card details.
• Basic technical and access records needed to secure and operate the service.

How we collect it

• Directly from you when you check out, submit the intake form, or reply to service emails.
• From Stripe when checkout completes and payment metadata is returned to us.
• From our hosting, storage, email, and fulfilment systems as they process your order.

How we use your data

• To produce, quality-check, amend, and deliver your polished CV and cover letter.
• To send operational emails, including your intake link, follow-up questions, reminders, and delivery notifications.
• To maintain a minimal customer profile so repeat orders, support requests, and refunds can be handled consistently.
• To detect misuse, prevent fraud, investigate disputes, and keep the service secure.
• To meet legal, accounting, tax, and record-keeping obligations.

Why we process it

• Most processing is necessary to perform the paid CV-polish service contract you request from us.
• We also process some data for legitimate interests such as service security, operational monitoring, support, and fraud prevention.
• Where the law requires us to keep or disclose information, we do so to comply with legal obligations.

Processors and tooling

We use third-party processors acting on our instructions to run this service. These currently include Stripe for payment processing, Resend for transactional and reply-routed service email, private Vercel Blob storage for uploaded CV files, and AI/LLM-backed document-generation workflows to analyse and rewrite CV content.

Storage and access controls

Uploaded CV files are stored in private blob storage, not on a public URL. Access is controlled through signed or otherwise restricted links used only for fulfilment and delivery. We also maintain audit logs for authorised staff access to CV files.

Automation and AI processing

This is an automated self-serve service. Your CV and related order data may be processed by AI/LLM systems that help analyse, draft, rewrite, and format your documents. We do not use this service to make decisions about your legal rights, employment eligibility, or suitability for a job.

International transfers

Some providers we use to host files, process payments, send email, or run automated document-generation workflows may process data outside Ireland or the EEA. Where that happens, we rely on contractual and provider-level safeguards intended for GDPR compliance.

Retention

Uploaded CV files and order records are currently scheduled for cleanup 30 days after order creation. Separately, we may retain a minimal customer profile and order-related email records for longer where reasonably needed for amendments, refunds, dispute handling, support, security, repeat orders, or legal obligations.

Reuse consent

The intake form includes an optional checkbox for future reuse of profile data we extract from your CV and answers. If you do not opt in, we use those materials only for the current order and the related support, refund, security, and legal processes around that order.

Your rights

Depending on the circumstances, GDPR gives you rights including access, rectification, erasure, restriction, objection, and data portability. Contact info@thinkstack.ie to exercise your rights. You may also complain to the Irish Data Protection Commission.

Contact

Privacy requests and questions can be sent to info@thinkstack.ie. This is also the contact path for access, deletion, and other GDPR requests. If we materially change this policy, we will update the date above.