Privacy Policy

Lustra provides CV formatting software to recruitment agencies. This policy explains how we handle personal data. For candidate CVs, the recruitment agency using Lustra is the data controller and Lustra acts as a data processor on its behalf.

Data we process

• Account data: names, work email addresses and roles of agency users.
• Candidate CVs uploaded by agencies, including the personal details they contain.
• Agency templates, branding assets and usage records.
• Enquiry details submitted through our website.

How we use it

We use CV content solely to produce the formatted document the agency requested. We do not sell personal data or use candidate CVs to train AI models. CV text is sent to our AI processing provider only to structure the document.

Retention

Unapproved previews are deleted when discarded. Account and usage records are kept while the agency's subscription is active. Agencies may request deletion of their data at any time.

Security

Files are held in private storage, access is restricted to the owning agency, and all traffic is encrypted in transit.

Your rights

Under UK GDPR you may request access, correction or deletion of your personal data. Candidates should contact the recruitment agency that holds their CV. For anything else, email hello@lustracv.com.