Privacy Policy

MultivoHub Ltd ("MultivoHub", "we", "us", "our") is a company registered in England and Wales. We operate the MultivoHub platform at multivohub.com — a UK-oriented job application service providing CV management, AI-assisted job search tools, and employment resources for job seekers.

For the purposes of UK data protection law, MultivoHub Ltd is the Data Controller in respect of the personal data we process about you. If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection contact at privacy@multivohub.com.

This Privacy Policy applies to all users of the MultivoHub platform and describes how we collect, use, store, share, and protect your personal data. It should be read alongside our Terms of Service.

We collect personal data in the following categories:

We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, contact privacy@multivohub.com and we will delete it promptly.

We use your personal data for the following purposes:

• Service Provision: Creating and managing your account, processing subscriptions, delivering platform features, and providing customer support.
• AI Personalisation: Tailoring AI-generated CVs, cover letters, and suggestions to your career history, target roles, and preferences. Your data is passed to our AI providers (see Section 7) only as necessary to generate personalised output.
• Product Improvement: Analysing aggregated, anonymised usage patterns to identify bugs, improve features, and enhance the user experience.
• Security: Detecting, preventing, and investigating fraud, unauthorised access, or other potentially harmful activity.
• Notifications: Sending transactional emails (account confirmations, billing receipts, security alerts) and, with your consent, product updates and tips.
• Legal Compliance: Meeting our obligations under applicable law, including responding to lawful requests from authorities and resolving disputes.

We do not sell your personal data to third parties for their marketing purposes. We do not use your data to serve you third-party advertising.

Under UK GDPR Article 6, we rely on the following legal bases for processing your personal data:

We retain your personal data for as long as necessary to provide the Service and fulfil the purposes set out in this policy, or as required by law. We operate a structured inactivity-based data retention policy:

• CV and career content: Deleted promptly upon a valid erasure request (see Section 6), or automatically at day 60 as described above. You may also delete individual documents at any time from within the platform.
• Billing records: Minimum billing records are retained as required by UK accounting law (Companies Act 2006 and HMRC guidelines), typically for 7 years.
• Usage and analytics data: Retained in anonymised or aggregated form for product improvement purposes.
• Support communications: Retained for 3 years after the relevant issue is resolved.

When data is no longer required, we securely delete or anonymise it in accordance with our internal data disposal procedures.

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of Access (Article 15): You may request a copy of the personal data we hold about you (a Subject Access Request).
• Right to Rectification (Article 16): You may ask us to correct inaccurate or incomplete personal data.
• Right to Erasure (Article 17): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other lawful basis applies.
• Right to Data Portability (Article 20): You may request your data in a structured, commonly used, machine-readable format.
• Right to Restriction (Article 18): You may ask us to restrict processing of your data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Object (Article 21): You may object at any time to processing based on our legitimate interests, including for direct marketing.
• Rights related to automated decision-making: Some features (e.g. Job Radar or fit scoring) use automated scoring or ranking. These assist your job search but do not produce a legally binding outcome about you. You may contact us if you wish to query how a score was generated. We do not make solely automated decisions with legal or similarly significant effects about you in the sense of Article 22 UK GDPR for recruitment outcomes on the platform — employers make their own decisions off-platform.

To exercise any of these rights, please email privacy@multivohub.com. We will respond within one calendar month. We may ask you to verify your identity before acting on a request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We share your personal data with the following categories of third parties, strictly as necessary to provide the Service:

We do not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or marketing platforms.

All third-party data processors are contractually bound to process your data only on our instructions and to implement appropriate security measures. Where processors are located outside the UK, we ensure appropriate safeguards are in place (such as UK Adequacy Decisions or Standard Contractual Clauses).

MultivoHub uses cookies and similar technologies to operate the Service. A dedicated Cookie Policy describes categories and management in more detail. In summary, we categorise cookies as follows:

You can manage cookie preferences through your browser settings. Deleting cookies may affect your ability to use parts of the Service that rely on session management.

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure:

• Encryption at rest: All data stored on our servers is encrypted using industry-standard encryption algorithms.
• Encryption in transit: All data transmitted between your browser and our servers is protected using TLS (Transport Layer Security).
• Access controls: Access to personal data is restricted to authorised personnel on a need-to-know basis, and is subject to audit logging.
• Authentication security: Multi-factor authentication and passkey support are available to all users through Clerk.
• Payment security: We do not store payment card data. All payment processing is handled by PCI DSS-compliant providers.

No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected users without undue delay, as required by UK GDPR Article 33 and 34.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact us:

We aim to respond to all data protection enquiries within one calendar month. Where a request is complex or we receive a high volume, we may extend this period by up to two further months, in which case we will notify you.