Privacy Policy
Effective from 8 May 2026
dnevo Talent is operated by Dnevo Partners Limited ("we", "us", "our"). We take your privacy seriously, and this policy explains in plain English what data we collect, why, who we share it with, and what rights you have. Please read this alongside our Terms of Service.
If you have any questions or want to exercise any of your rights, contact our Data Privacy Manager at info@dnevo.com.
1. The Headlines
If you only read one section, read this one.
- We collect your email, name, job title, location, and the CVs and job descriptions you submit. We use this to run AI-powered match analyses and to manage your account.
- For guest matches (no account needed), we keep your CV and job description for 60 minutes in our cache, then delete them. We keep a small record of your match scores plus any optional details you provided (first name, job title, location). You can delete this record at any time using the link on your result page.
- We use AI service providers to analyse your CV against the job description. These providers operate under recognised legal safeguards including the EU-US Data Privacy Framework.
- We do not sell your personal data. We do not use your CVs or job descriptions to train AI models. We do not run advertising trackers.
- You can delete your account, your CVs, and your match history at any time from within the app.
- You have rights under UK GDPR including access, correction, deletion, and the right to complain to the Information Commissioner's Office.
2. Important Information and Who We Are
2.1 Purpose of this notice
This privacy notice explains how we handle your personal data when you use dnevo Talent. It covers what we collect, what we do with it, and how to exercise your rights.
dnevo Talent is intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact info@dnevo.com and we'll delete it.
2.2 Controller
Dnevo Partners Limited is the data controller for dnevo Talent and is responsible for your personal data.
| Field | Value |
|---|---|
| Legal entity | Dnevo Partners Limited |
| Trading as | dnevo Talent |
| Registered address | National House, 60-66 Wardour Street, London W1F 0TA, United Kingdom |
| Data Privacy Manager | info@dnevo.com |
We have an internal Data Privacy Manager who oversees questions about this notice and handles requests to exercise your data rights.
2.3 Relationship to dnevo Partners
dnevo Talent is a product brand of Dnevo Partners Limited. The recruitment business operated by Dnevo Partners Limited has its own separate privacy notice covering candidate placement services. This notice covers only the dnevo Talent service (CV/JD match analysis).
2.4 Changes to this notice
This notice was last updated on 8 May 2026. We'll post any changes on this page. If the changes are significant, we'll let you know directly. Continuing to use dnevo Talent after a change means you accept the updated notice.
3. The Data We Collect About You
3.1 Account information
When you create an account, we collect:
- Email address
- Full name (optional, you can set or update this in Settings)
- Current job title (optional)
- Current location (optional)
3.2 CVs
When you upload a CV, we collect:
- The full text of the CV
- The original file (PDF or DOCX) stored in our database
- A label you provide for the CV
CVs may contain information about your work history, education, qualifications, and any other content you've included in the document.
3.3 Job descriptions
When you submit a job description (by paste or upload), we collect the full text of the JD. JDs are used to run match analyses and are retained as part of our role library, which helps us match future candidates against the same role.
3.4 Match analysis data
When we run a match between your CV and a JD, we generate and store:
- Numeric scores (overall, semantic, contextual, surface)
- A verdict band (e.g. STRETCH, SOLID, STRONG)
- A full match report (strengths, gaps, tailoring suggestions, cover letter draft, interview prep, recruiter insights)
- The model version and prompt version used
3.5 Guest match data
You can use dnevo Talent without creating an account. Guest matches work like this:
- Your CV and the JD you submit are held in our cache for 60 minutes, then automatically deleted.
- The full match report is shown to you on the result page during that 60-minute window.
- A small summary record is kept in our database after the cache expires. This record contains: any first name, job title, and location you optionally provided, plus the match scores. It does not contain your CV text.
- The job description text itself is kept in our role library (see 3.3).
You can delete your guest match summary record at any time using the deletion link shown on your result page. No account required.
If you don't provide the optional first name / job title / location fields, only your match scores and the JD reference are retained.
3.6 Special categories of data
We don't deliberately collect special categories of personal data such as health information, religious beliefs, ethnic origin, sexual orientation, or biometric data.
CVs sometimes contain this kind of information incidentally - for example, mentions of disability, religious organisations you've worked for, or medical leave. We process this data only to the extent it appears in the CV you submit. We don't extract, index, or otherwise specifically use special category data, and we don't share it with third parties beyond the AI service providers running the match analysis.
If you're concerned about special category data appearing in your CV, you can redact it before uploading.
3.7 Technical data
When you use the dnevo Talent website, we automatically collect:
- IP address
- Browser type and version
- Operating system
- Device type
- Time zone
We use this to keep the service secure, troubleshoot problems, and protect against fraud and abuse.
3.8 What we don't collect
We don't collect:
- Financial information (we don't take payments through dnevo Talent)
- Government-issued IDs
- Biometric voiceprints, face scans, or similar
- Information from your device beyond standard technical data
- Data from cookies set by other websites
4. How We Use Your Personal Data
We only use your personal data when the law allows us to. The lawful bases we rely on are set out in the table below.
Table of activities
| Purpose | Type of data | Lawful basis | Retention |
|---|---|---|---|
| Running an AI match analysis on a CV and JD you submit | CV content, JD content, optional candidate context | Consent (the consent box you tick on the match form) | See section 9 |
| Providing your registered user account (sign-in, history, settings) | Email, name, job title, location | Performance of contract | Until you delete your account |
| Storing your CVs and match history for future use | CV content, match reports, scores | Performance of contract | Until you delete the CV / match / account |
| Maintaining a library of job descriptions for the platform | JD content | Legitimate interest (matching future candidates, product analytics) | Indefinite |
| Sending sign-in links via email | Email address | Performance of contract | Until you delete your account |
| Product analytics and improvement | Match scores, verdict bands, optional candidate context, technical and usage data | Legitimate interest (improving the platform, understanding usage patterns) | See section 9 |
| Security and fraud prevention | Technical data (IP, browser), session data | Legitimate interest (protecting the platform and our users) | See section 9 |
| Responding to legal requests, regulators, or audits | Whatever data is relevant to the request | Legal obligation | As long as the obligation requires |
We don't currently send marketing communications from dnevo Talent. If we ever do, we'll ask for your consent first.
5. How Our AI Works
dnevo Talent is fundamentally an AI product. We think you deserve to know what that actually means.
5.1 What the AI does
When you submit a CV and a job description, we send both to an AI service to generate the match analysis. The AI produces:
- Numeric scores assessing fit across multiple dimensions
- Specific strengths and gaps
- Tailoring suggestions for the CV
- A draft cover letter
- Interview preparation notes
- Recruiter-style insights about positioning
The AI processes your CV and JD as context and generates the report. The report is then shown to you (and saved if you've created an account or used the W5-6 conversion flow).
5.2 Where the AI processing happens
We use Anthropic, an AI service provider based in the United States, to perform the match analysis. Anthropic operates under the EU-US Data Privacy Framework (and its UK Extension), which is the legal mechanism for the international transfer of your CV and JD data. Where additional providers are involved in supporting infrastructure (hosting, database, email), they may also operate outside the UK and EEA. We use legally recognised safeguards - Standard Contractual Clauses or other appropriate mechanisms - for those transfers.
5.3 What we don't do with your data
- We do not use your CVs or job descriptions to train AI models.
- We do not sell, license, or share your CV content with anyone except the AI service providers running the analysis.
- We do not generate biometric voiceprints, face scans, or similar.
- We do not use AI for advertising profiling or third-party marketing.
5.4 Automated decision-making and your right to human input
Match scores are generated by AI. They are advisory - they don't directly determine whether you can apply for a job, whether an employer will see your application, or anything similar. They're a tool to help you understand fit, not a decision about you.
If you'd like to discuss the AI's analysis or have questions about how a particular score was generated, you can email info@dnevo.com. We'll respond where we can, though we cannot guarantee a personal response to every query.
6. Disclosures of Your Personal Data
We share your personal data only with parties who help us run dnevo Talent or who we're legally required to share with.
6.1 Service providers
We use third-party providers in the following categories:
- AI processing partners - to run the match analysis (see section 5)
- Hosting and infrastructure providers - to run the website and store data
- Database and authentication providers - to manage your account and store your CVs and match history
- Transactional email providers - to send sign-in links
We require all our providers to handle your data securely and only for the specific purpose we've engaged them for. They don't get to use your data for their own purposes.
6.2 Professional advisers
We may share data with our lawyers, accountants, auditors, or insurers when we need their advice or when we're legally required to (for example, in the context of an audit). We share only the minimum needed.
6.3 Regulators and law enforcement
We may share data with regulators or law enforcement when we're legally required to do so, or when we need to protect our rights or the rights of others.
6.4 What we don't share
We do not sell your personal data. We do not share it with advertisers. We do not share your CV content with employers (you'd need to give us specific instructions to do that, which is not currently part of dnevo Talent's functionality).
7. International Transfers
Some of our service providers are based outside the UK and EEA. When we transfer your personal data internationally, we rely on legally recognised safeguards:
- EU-US Data Privacy Framework (and its UK Extension) - for transfers to certified US-based providers including Anthropic, our AI processing partner.
- Standard Contractual Clauses - for transfers to other non-UK/EEA providers.
You can request more information about the specific safeguards in place by emailing info@dnevo.com.
8. Data Security
We take security seriously and have the following measures in place:
- Data is encrypted in transit (HTTPS) and at rest in our database.
- Access to your data is restricted to a small number of authorised people who need it to maintain the service.
- Our database uses row-level security, so users can only access their own data.
- We use signed temporary tokens (HMAC) for sensitive operations like guest match deletion.
- We use magic-link authentication only - there are no passwords for users to lose or for attackers to guess.
We have procedures in place for handling any suspected personal data breach. If a breach affects your data and the law requires us to notify you, we will.
9. Data Retention
We only keep your personal data as long as we need to.
Guest matches (no account)
| Data | Retention |
|---|---|
| CV text and JD text in cache | 60 minutes from submission, then automatically deleted |
| Match summary (first name, job title, location, scores) | Until you delete it via the deletion link on your result page |
| Job description text in role library | Indefinite (used for future matching) |
Registered user accounts
| Data | Retention |
|---|---|
| Account details (email, name, job title, location) | Until you delete your account |
| CVs (full text and uploaded files) | Until you delete each CV, or until you delete your account |
| Match history (full reports, scores) | Until you delete each match, or until you delete your account |
| Sessions and authentication tokens | Up to 30 days, refreshed when you sign in |
Account deletion
When you delete your account from /settings/delete, we delete your account, CVs, match history, and any other personal data within 14 days. Database backups may temporarily retain your data for up to 7 days after deletion as part of our standard backup rotation. After that, your data is permanently gone.
Technical and security data
| Data | Retention |
|---|---|
| IP addresses, session data, security logs | Up to 90 days |
In some cases, we may anonymise data (so that it can no longer be linked to you) and retain it indefinitely for product analytics. Anonymised data is no longer personal data under the law.
10. Your Legal Rights
You have the following rights under UK GDPR:
- Right of access - get a copy of the personal data we hold about you
- Right to rectification - correct any incomplete or inaccurate data
- Right to erasure - ask us to delete your personal data ("right to be forgotten")
- Right to restrict processing - ask us to suspend processing in certain circumstances
- Right to data portability - get your data in a structured, machine-readable format
- Right to object - object to processing that relies on legitimate interest
- Right to withdraw consent - where we're processing on the basis of consent, you can withdraw it at any time
How to exercise your rights
For most things, you can do this yourself in the app:
- Delete a guest match - use the deletion link shown on your result page
- Delete a CV - go to your CVs page and click Delete on the relevant CV
- Delete a match - go to your match history and delete individual matches
- Update your profile - go to Settings
- Delete your account - go to Settings → Delete account
For anything else (data access requests, rectification of data you can't edit yourself, restriction, objection, etc.), email info@dnevo.com. We aim to respond within 30 days.
Right to complain
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. Their website is ico.org.uk. We'd appreciate the chance to address your concerns first, so please contact us before going to the ICO.
11. Cookies
dnevo Talent uses only the cookies necessary to operate the service:
- Authentication session cookies (set by Supabase, our auth provider) - to keep you signed in
- A short-lived sign-up flow cookie (
dnevo-pending-temp-id) - used only during sign-up to associate a guest match with your new account; expires within one hour
dnevo Talent does not set advertising cookies, analytics cookies, or third-party tracking cookies.
If you visit our parent website at dnevo.com, separate cookie practices apply. See the Dnevo Partners cookie disclosure on that site for details.
12. Contact Us
If you have questions about this notice or want to exercise your rights, get in touch:
- Email: info@dnevo.com
- Address: Dnevo Partners Limited, National House, 60-66 Wardour Street, London W1F 0TA, United Kingdom
For complaints to the supervisory authority:
- Information Commissioner's Office (ICO) - ico.org.uk
Last updated: 8 May 2026