Home · Privacy
Privacy Policy & Personal Information Collection Statement
Arrie is a free AI CV review operated from Hong Kong. This page explains what personal data we collect, why, who processes it, how long we keep it, and how you can ask us to delete it. It is written to meet the Hong Kong Personal Data (Privacy) Ordinance (PDPO, Cap. 486). It is not legal advice.
Personal Information Collection Statement (PICS)
When you use Arrie, we may collect the following personal data:
- Your CV / resume file (PDF, DOCX or TXT) and the text we extract from it — used only to produce your diagnosis and related free tools (rewrite, cover letter, interview guide).
- Optional job description (JD) you paste or that we fetch from a URL you provide — used to tailor the diagnosis and tools to that role.
- Optional email address — only if you buy a Human Coach Review, so we can send the review and receipt.
- Technical data such as IP address in server logs (for security and abuse prevention), and, only if you click Accept, cookie-based analytics identifiers from Google Analytics 4 and Google Ads conversion tracking.
- Ad click identifier and campaign tags — if you reach Arrie through a link that carries them (for example by clicking one of our Google ads), the Google click identifier (gclid, gbraid or wbraid) and campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content) from the page address. These are not cookies and do not depend on your cookie choice.
Is supply voluntary? Uploading a CV is voluntary. You can use the site without an account and without giving an email. Analytics cookies are off until you Accept. Paying for a Coach Review requires an email and payment through Stripe.
Classes of transferees: your CV text and file are sent to third-party AI services (via OpenRouter and document-parsing providers) solely to produce your diagnosis and tools. Payment details are handled by Stripe. If you Accept cookies, Google Analytics 4 / Google Ads receive anonymous usage events (never your CV). A human coach receives your CV and diagnosis only when you purchase a Coach Review. If you arrived from one of our Google ads, the ad click identifier may be shared with Google Ads, together with the conversion type (completed check or Coach purchase), its time and, for purchases, the amount paid, to report which ads led to those results (never your CV, name or email).
Access and correction: email cv@arrie.pro to request access, correction or earlier deletion of your personal data.
What we collect and why
- CV file and extracted text — to run the AI diagnosis and free refine / cover letter / interview tools.
- Job description (optional) — to score fit and tailor suggestions.
- Email (Coach orders only) — to deliver the review and for order records.
- Browser copy of your result — stored only on your device for convenience; you can clear it anytime.
- Cookies / analytics (after Accept only) — to count page views, feature use (e.g. upload or download events) and whether ads lead to visits and completed diagnoses. Personalised advertising is not enabled. Your CV, its contents, file names, job ads, names and emails are never sent to analytics or Google Ads.
- Ad measurement (ad click identifier and campaign tags) — kept in your browser’s local storage for up to 90 days after you land, then sent with your CV check and, if you buy, stored with your Coach order (including Stripe’s order metadata), to measure which ads and campaigns lead to completed checks and purchases. We may share the click identifier with Google Ads to report those conversions. This uses no cookies. To opt out, clear this site’s data in your browser before uploading, or email cv@arrie.pro and we will exclude your check or order.
- Anonymous funnel counts — when a Coach offer is shown or clicked and when the payment page is opened, we count the event with a random check or browser-tab ID only (no IP address, no CV content), to see how many people move from a check to a Coach order.
We do not create user accounts. We do not sell personal data. We do not share CVs with hiring platforms or recruiters.
Who processes your data
- Arrie server (Hong Kong VPS) — stores uploads temporarily for the service, quality review and order fulfilment.
- OpenRouter and underlying LLM / document-parsing providers — receive your file or extracted text to generate the diagnosis and tools. These providers are often outside Hong Kong (for example in the United States or other regions). This is a cross-border transfer to processors; Arrie remains responsible under the PDPO for what those processors do with the data we send.
- Stripe — processes card payments for Coach Reviews on Stripe-hosted Checkout. Card numbers never touch Arrie’s servers.
- Google Analytics 4 / Google Ads — only after you Accept cookies; receive anonymous measurement events, never CV content. Separately, if you came from one of our Google ads, Google Ads may receive that ad’s click identifier with the conversion it led to (see Ad measurement above).
- Human coach — only when you pay for a Coach Review; bound to use your CV solely for that review.
How long we keep data (retention)
These periods match how the live service is built today:
- Uploaded CVs and diagnoses on our server: automatically deleted after 7 days.
- CV tied to an order in progress (for example a Coach Review not yet finished): kept until the order completes, and in any case no longer than 30 days from when the order was created — then deleted even if the order is still open.
- De-identified training copy: a copy with your name, phone, email and links removed may be retained to improve our AI models. It is not deleted by the 7-day upload purge.
- Browser copy: stays on your device until you clear site data or use the in-product clear control.
- Coach order email and payment records: kept for fulfilment, support and dispute handling, then automatically deleted from Arrie’s server 12 months after the order’s last activity. Card data stays with Stripe, and Stripe keeps its own payment records under its policies.
- Ad click identifier and campaign tags: in your browser for up to 90 days; on our server only as part of the record they are attached to — deleted with your CV check after 7 days, or with your Coach order after 12 months.
- Anonymous funnel counts: deleted after 12 months.
- Server access logs: kept for security for no longer than 30 days; they are not used to rebuild your CV.
To request earlier deletion of your upload or order-related personal data, email cv@arrie.pro with enough detail for us to find the record (for example approximate upload time, filename, or order email). We will confirm when it is done.
Cookies
Essential cookies or local storage may be used for language and theme preference and to remember your cookie choice. Analytics and ad-measurement cookies load only after you click Accept. Separately, local storage keeps any ad click identifier and campaign tags from the page address for up to 90 days (see Ad measurement); this is not a cookie and is not shared with Google Analytics. You can change your mind anytime via Cookie settings in the page footer.
Your PDPO rights
Under the PDPO you may request access to and correction of your personal data we hold. You may also ask us to delete data earlier than the schedule above. Contact cv@arrie.pro. We may need to verify the request. You can also complain to the Privacy Commissioner for Personal Data, Hong Kong.
Children
Arrie is aimed at job seekers. It is not directed at children. Do not upload a CV for anyone under 16 without appropriate parental or guardian authority.
Changes
We may update this page when the product or the law changes. The “Last updated” date at the top will change. Material changes will also be noted in the site footer privacy summary where practical.
Contact
Arrie is operated by Cloud Factory Technology Limited (BVI Company No. 2151924).
Privacy and deletion requests: cv@arrie.pro
Security reports: see Security and /.well-known/security.txt.