What we do with your CV

Last updated 6 October 2026

You are handing us your employment history, and often at a point in your life when you would rather not be. This page says exactly what happens to it, in the order that matters — what we keep, who else sees it, and how to get it all back or destroyed.

The short version

We do not keep the CV file you upload. We read it, pull out the facts, and discard the file itself.
We do send its text to Anthropic, in the United States, to do that reading. This is the one place your CV leaves the UK.
We do not sell your data, to anyone, for anything. There is no advertising on this site and no data broker in this list.
Deleting your account really deletes it — the database rows, the generated documents, and the login itself.

Who is responsible

Constellation is operated by Qayum Software Ltd, a company registered in England and Wales under number 17432547. We are the data controller for the information described here.

You can reach us at hello@constellation.careers, or by post at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

What we collect, and why

Your email and password

To create your account and let you sign back in. The password is hashed by our authentication provider and is never visible to us.

If you join the waitlist

Your email address, and your first name and why you want to join if you choose to tell us. Also when you joined, when you confirmed, and which version of the consent wording you agreed to. We use it to understand who Constellation is for, to tell you when it opens, and to offer early-access terms to people who were on the list. We send one email to confirm the address and nothing else until we open. We do not track whether you open our emails or click their links. Please keep health and other sensitive details out of the “why” box; if any end up there, we will delete them on request.

Name, phone, location, LinkedIn

Taken from your CV so a tailored version can carry your real contact details. Everything except your name is optional.

Your CV, as facts

Skills, roles, employers, dates, education and certifications, extracted from the file you upload. This is the substance of the service: matching works by comparing these against real job adverts.

What you are looking for

Where you can work, a minimum salary if you set one, and whether you want onsite, hybrid or remote roles. Used to decide which searches run for you at all.

Applications you track

Which jobs you tailored a CV for and what happened next, because that record is the point of the feature.

Subscription status

Whether you are paying, and when the current period ends. Card details are handled entirely by Stripe and never reach our servers.

IP address

Recorded briefly when you use the public demo, join the waitlist or create an account, to stop one machine exhausting a shared allowance. Deleted after seven days.

Refused requests

When the site turns something down — a file that is not yours, a feature you have not paid for, an allowance you have used up — we record that it happened, which account it was, and which page. We do not record what was asked for, and there is no IP address in these entries. It is how we would notice somebody probing for other people’s data, and how we could tell you what happened if they ever succeeded.

Our lawful basis for almost all of this is performance of a contract — you asked us to match you to jobs and we cannot do it without your CV. The IP records and the record of refused requests rest on legitimate interests: keeping the service available, keeping its costs bounded, and being able to tell whether anyone has tried to reach data that is not theirs. Billing records are kept to meet legal obligations around tax. The waitlist rests on your consent, which you can withdraw at any time by emailing us; withdrawing deletes your entry.

A CV can contain more than you intend. We do not ask for health information, trade union membership, religion or anything else the law treats as special category data — but people sometimes include it, in a career break explanation or a membership line.

If yours does, it will be extracted along with everything else, because the system cannot tell the difference. If you would rather it were not there, remove it from the file before uploading, or edit the facts afterwards.

Who else sees it

These are the only organisations that process your information on our behalf. Each does one job, and none of them is permitted to use your data for their own purposes.

Supabase

The database and login system. Your data is stored in their London (eu-west-2) region and stays in the UK.

Vercel

Runs the website itself.

Anthropic

Reads your CV text to extract the facts, and writes the tailored version for a specific job. Based in the United States.

Stripe

Takes payment. They receive your email and payment details; we never see a card number.

Sentry

Tells us when something breaks, so a fault reaches us rather than only you. Based in the United States. They receive the error and the page it happened on — never your CV, your answers, or anything you typed. Where an error belongs to a signed-in account we send the account’s ID and not your email.

Have I Been Pwned

Checks a new password against passwords already exposed in public data breaches, so you cannot pick one attackers already have. Your password is never sent: we send the first five characters of a one-way scramble of it, which matches around eight hundred different passwords, and do the comparison ourselves. They cannot tell which one you chose, or whether it matched.

hCaptcha

Checks that sign-ups, including waitlist sign-ups, are people rather than scripts.

Neo

The mailbox our waitlist confirmation email is sent from. It handles your email address and that message, and nothing from your CV or anything else you told us.

Job adverts come from Reed, Adzuna, JobsPipe and employers’ own boards. Searching happens on our side against a shared pool — we do not send your CV or your name to any job board. Applying takes you to the original advert, and what you do there is between you and them. There is more detail on where our data comes from.

Your CV leaving the UK

To extract facts from your CV and to write a tailored version, the text of it is sent to Anthropic in the United States. That is a transfer outside the UK, and it is the only one.

The file you uploaded is not sent anywhere and is not stored — only the text is read, and only for as long as the request takes. The transfer is covered by the UK addendum to the standard contractual clauses.

How long we keep it

Your uploaded file: not at all. It is read in memory and never written to disk.
Your account and CV facts: until you delete them. This is a tool you come back to between jobs, so we do not expire it underneath you.
Tailored CVs we generated: until you delete your account, or the application they belong to.
Waitlist: until you ask to leave it. Leaving deletes your entry. An address that is never confirmed is deleted after 30 days.
IP records: seven days. Removed automatically.
Refused requests: twelve months. Long enough to see a pattern that builds slowly, and to answer a regulator if we ever have to. Deleted with your account.
Billing records: six years, which is how long UK tax rules require them to be kept.

What you can ask for

Under UK data protection law you can ask us to show you what we hold, correct it, delete it, hand it over in a portable form, restrict what we do with it, or object to processing based on legitimate interests. We will not charge you and we will answer within one month.

Deleting is built in. Your profile page has a delete button that removes everything immediately — you do not need to email anyone or wait for us.
To leave the waitlist, email us and we will delete your entry.
Correcting is built in. Every fact extracted from your CV can be edited or removed from the track that holds it.
For a copy of your data, email us and we will send it. A self-service export is something we are building.

If you think we have handled your information badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, and you do not have to speak to us before you do.

Cookies

We use cookies for one thing: keeping you signed in. They are strictly necessary for a service you asked for, which is why there is no banner asking you to accept them — you cannot have an account without them, and refusing is the same as not signing in.

Sign-in cookies that identify your logged-in session, alongside one of our own that tracks how long that session has been running. By default these are deleted when you close your browser, so a machine that is not yours does not stay signed in. Tick “keep me signed in” when you log in and they are kept instead — but still not forever: a session ends after 14 days, or after 7 days without using the site, whichever comes first. Signing out clears that choice.
A short-lived cookie during a password reset, so that only someone who opened the emailed link can set a new password. It lasts fifteen minutes.

There is no analytics, no advertising and no tracking on this site. Nothing follows you to other websites. hCaptcha sets its own cookie when it appears on the sign-up, login and waitlist forms, to tell people from scripts.

Security

Connections to the site and to our database are encrypted. Generated CVs are held in private storage that is not reachable without going through the application, and your data is scoped to your account rather than shared across users. If a breach ever affected your rights, we would tell the ICO within 72 hours and tell you without undue delay.

Children

Constellation is for people looking for work and is not intended for under-16s. We do not knowingly hold data about children; if you believe we have, tell us and we will remove it.

Last updated 6 October 2026. If we change anything that affects you materially, we will tell you by email before it takes effect rather than quietly editing this page.