What personal data describe.me collects, why we hold it, who we share it with, and the rights you have over it.
describe.me is operated by Concept-AI Ltd, a company registered in England and Wales, trading as describe.me. For the purposes of UK data protection law we are the data controller for the personal data described in this notice.
Contact us about anything here at hello@describe.me.
utm_ parameters and advertising click identifier on the link. It tells us which adverts bring people to the service, is stored against your account, and is deleted with it.Where an employer contacts you through describe.me, we keep a record of that contact and of any interview arranged through the service.
| What we do | Lawful basis |
|---|---|
| Run your account and provide matching, skills-gap analysis and interview preparation | Performance of a contract |
| Show your profile to an employer in identifiable form | Your consent, given for each employer |
| Show your profile anonymously in employer shortlists | Legitimate interests — running a matching service, balanced against your privacy by removing identifying details |
| Send service emails you need — verification, security, interview invitations | Performance of a contract |
| Send optional product updates | Your consent — withdraw any time from the unsubscribe link |
| Measure which adverts and campaigns work | Your consent for advertising and analytics cookies; legitimate interests for our own first-party records |
| Keep the service secure and prevent abuse | Legitimate interests |
| Meet our legal and accounting obligations | Legal obligation |
describe.me matches people to roles by automated analysis of profile and role information. To do this we send profile and role text — including text extracted from CVs — to specialist language processing providers acting as our processors under contract. They process it only to return a result to us, and are not permitted to use it to train their own models or for any purpose of their own.
These are not decisions producing legal or similarly significant effects taken solely by automated means. A match surfaces you to an employer; a person decides whether to make contact, and a person decides whether to hire. You can ask us to explain how a match was produced, and correct any profile information it relied on.
Employers see anonymised profiles in their shortlists. Your identity and contact details are released only to an employer you have consented to.
Each of these is bound by contract to process personal data only on our instructions.
| Provider | What for |
|---|---|
| Microsoft Azure | Hosting, databases and file storage |
| Anthropic; OpenAI | Language processing for matching, skills analysis and interview preparation |
| SendGrid | Sending service and notification emails |
| Twilio | SMS, where you verify a phone number |
| Stripe | Payments by employer customers. Card details go directly to Stripe; we never hold them |
| Sentry | Error monitoring and diagnostics |
| Analytics and advertising measurement | |
| Advertising measurement |
We may also disclose data where the law requires it, or to establish or defend legal claims. We do not sell your personal data.
Some providers process data outside the UK, including in the United States and the European Economic Area. Where they do, we rely on UK adequacy regulations or on the International Data Transfer Addendum to the EU Standard Contractual Clauses, alongside appropriate technical safeguards.
| Data | Kept for |
|---|---|
| Your account and profile | While your account is open, then 12 months, unless you ask us to delete it sooner |
| Uploaded CVs and generated videos | Deleted with your account, or sooner if you remove them |
| Employer contact and interview records | Up to 3 years, so both sides keep a record of what was agreed |
| Billing and accounting records | 7 years, as tax law requires |
| Technical logs and error diagnostics | Up to 90 days |
| Campaign attribution | With the account, and deleted with it |
Under UK data protection law you have the right to:
Use your account settings, or email hello@describe.me. We respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. We would rather you came to us first, so we can put it right.
We use cookies for three things:
dm_attribution cookie stores campaign identifiers for up to 90 days and is cleared when you register.Analytics and advertising cookies are set only where you have consented, and you can change that choice at any time.
Data is encrypted in transit and at rest. Passwords are stored only as salted hashes and cannot be recovered by us or by anyone else. Administrative access is limited to named staff, protected by multi-factor authentication, and audited.
describe.me is not intended for anyone under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, tell us and we will delete it.
We update this notice as the service changes. Material changes are notified by email or in the app before they take effect, and the date below always shows the current version.