Privacy Policy

This Privacy Policy explains how GetYourCV collects, uses, shares, and protects your personal data when you use our website, application, and related services.

We believe privacy policies should be easy to read and transparent. Below, you will find a summary of our core principles, followed by the complete policy details.

Our Privacy Principles

• Minimization: We only collect the personal data necessary to provide, secure, and improve GetYourCV.
• No Data Sales: We never sell your personal information or CV contents to third parties.
• No AI Model Training: We never use the content of your CV to train AI models.
• User Control: You remain in complete control of your data, with the ability to edit, export, or permanently delete your account at any time.

1. Introduction

This Privacy Policy applies to your use of the GetYourCV platform, including our website at www.getyourcv.net and our CV builder application at cvmaker.getyourcv.net (collectively, the "Service").

By accessing or using the Service, you acknowledge the practices described in this policy. If you have any questions or concerns, please contact us using the information provided at the bottom of this page.

2. Who We Are

GetYourCV is operated by ENTALEQ SUARL, a company registered in Tunisia ("GetYourCV", "we", "us", "our").

• Registered Address: 75 Av. Kheireddine Pacha, Tunis 1073, Tunisia
• Data Controller: ENTALEQ SUARL is the legal data controller responsible for processing your personal data under applicable data protection laws.

3. Information We Collect

We collect information to deliver our Service efficiently and safely. The data we collect falls into three main categories:

A. Information You Provide Directly

• CV & Cover Letter Content: Information you enter or upload into the builder to create your CV or cover letter, such as your full name, contact information, work experience, education, skills, languages, professional summary, and profile photo.
• Account Information: Name and email address when creating an account. You can build a CV on the free plan without registering, but a free account is required to download it, and an account is also required for paid plans.
• Support Messages: Correspondence and attachments sent to our support team.

B. Information Collected Automatically

• Usage & Device Data: IP address (used to infer general location), browser type, operating system, pages visited, feature usage, referring URLs, and system logs.
• Interaction Data: Aggregated and masked interactions (e.g., clicks, scrolling, mouse movements) used strictly to identify usability issues and technical bugs.

C. Information Received from Third Parties

• Payment Confirmations: Confirmation from our merchant of record regarding plan subscription status, transaction ID, email, and billing country.
• Single Sign-On (SSO): Basic profile information (such as name and email address) if you choose to register or log in via a third-party account provider.

Note on Sensitive Information: A CV may contain sensitive personal data (e.g., photo, date of birth, nationality, marital status, health/disability information). We do not require this information. If you voluntarily include sensitive details in your CV, you explicitly consent to our processing of this data solely to generate and store your CV. You can remove this data at any time by editing or deleting your CV.

4. How We Use Your Information

We process your personal data under lawful bases required by data protection regulations (such as GDPR):

5. AI Features

We offer AI-assisted tools to help review and enhance your CV content, such as automated CV analysis, writing suggestions, rephrasing, and spell-checking.

• Strict Confidentiality: Relevant CV text sent to our AI service providers is transmitted securely and handled exclusively for producing your requested outputs or reviews.
• No AI Training: Our contracts with AI service providers strictly prohibit them from storing or using your personal data or CV content to train or fine-tune their AI models.

6. Cookies & Analytics

We use cookies and similar tracking technologies to ensure our website functions correctly, remember your preferences, and measure service performance.

• Essential Cookies: Necessary for core functionality (e.g., authentication, security, language settings). These cannot be disabled.
• Analytics Cookies: Help us understand aggregate traffic patterns and user interactions.
• Advertising Cookies: Used on public sections of our website to show non-intrusive ads and measure campaign effectiveness.

Analytics and advertising cookies are optional and, where local law requires it, are set only after you consent. Some are placed by third-party providers under their own privacy policies, and typically expire between 12 months and 2 years. We never share your CV content, account details, or email address with advertisers.

Your Control: You can manage or revoke your cookie preferences at any time using our website's cookie settings link in the footer or through your web browser settings. Disabling advertising cookies will not reduce the number of ads shown, but will make them non-personalized. Blocking essential cookies will prevent sign-in and saving from working.

7. Payments

Paid plans are sold and processed by Paddle.com, our Merchant of Record. At checkout, Paddle collects and processes your payment data directly as an independent data controller under its own privacy policy, and handles billing and tax.

GetYourCV never receives, processes, or stores your full credit card details. We only receive limited transaction metadata (such as email address, plan type, billing country, and transaction reference) necessary to activate your access and maintain tax records.

8. Sharing Your Information

We do not sell, rent, or trade your personal data. We share data only with trusted service provider categories operating under strict data processing agreements:

• Cloud Infrastructure & Hosting: Database, file storage, and content delivery network providers.
• AI Service Providers: Secure processors used exclusively to fulfill AI-powered feature requests and automated CV reviews.
• Payment Processors: Authorized sellers of record handling transaction compliance, billing, and tax.
• Analytics & Performance Providers: Tools used to evaluate system performance and aggregate traffic metrics.
• Communication & Support Tools: Platforms used to send email notifications and manage customer support tickets.
• Legal Authorities & Professional Advisers: Disclosures made only when legally mandated, or to defend legal claims.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity with prior notice.

9. International Data Transfers

GetYourCV is operated from Tunisia, with cloud infrastructure and third-party service providers located in the European Economic Area (EEA), the United Kingdom, and the United States.

When personal data is transferred across international borders, we ensure appropriate safeguards are implemented in compliance with applicable laws, including the European Commission's Standard Contractual Clauses (SCCs), UK Addendums, and robust technical encryption protocols (in transit and at rest).

10. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy:

• Active Account Data: CV contents and account details are stored for as long as your account remains active.
• Guest CV Data: CVs created without an account are stored temporarily in session memory and discarded shortly thereafter.
• Account Deletion: If you delete your account, your CVs and personal data are permanently deleted from our active databases.
• Financial & Legal Records: Transaction, tax, and accounting logs are retained for statutory retention periods (up to 10 years).
• Support Records: Customer support communications are retained for up to 3 years.

11. Security

We implement strict technical and organizational measures to safeguard your personal data:

• Encryption: Data in transit is encrypted using modern TLS/HTTPS protocols; database backups and sensitive storage are encrypted at rest.
• Access Controls: Strict role-based access limits employee access to production databases.
• Incident Response: In the event of a confirmed data breach affecting your rights, we will notify you and relevant supervisory authorities as required by law.

12. Your Rights

Depending on your jurisdiction (e.g., under GDPR or regional privacy frameworks), you possess the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Update or correct inaccurate personal details.
• Erasure ("Right to be Forgotten"): Request permanent deletion of your data (or delete your account directly from your settings).
• Portability: Export your CV and data in a structured, machine-readable format.
• Restriction & Objection: Object to processing based on legitimate interests or restrict specific data handling activities.
• Withdraw Consent: Revoke consent previously given for analytics, marketing, or cookie tracking.
• Lodge a Complaint: Contact your local Data Protection Authority (e.g., Instance Nationale de Protection des Données Personnelles (INPDP) in Tunisia, or your national authority in the EEA/UK).

To exercise any of these rights, email us at [email protected]. Requests are processed free of charge within 30 days.

13. Additional Rights for U.S. Residents

If you live in California or another U.S. state with a comprehensive privacy law, you have the right to know what personal information we collect, to request its deletion or correction, to receive a copy of it, and to opt out of targeted advertising. We will never discriminate against you for exercising any of these rights — the Service, its price, and its quality remain exactly the same.

On "selling" and "sharing": we do not sell your personal information for money, and we never disclose your CV content, account details, or email address to advertisers. However, when advertising cookies are enabled, the advertising identifiers set on our public pages may qualify as "sharing" for cross-context behavioral advertising under the California Consumer Privacy Act, or as "targeted advertising" under similar state laws.

How to opt out: decline or withdraw advertising cookies at any time through our cookie settings, or email us at [email protected] and we will action it for you. Opting out does not remove ads — it makes them non-personalized.

We do not use sensitive personal information to infer characteristics about you, and we do not knowingly sell or share the personal information of anyone under 16. You may use an authorized agent to submit a request on your behalf; we may ask for proof of their authority and verify your identity before we act.

14. Children's Privacy

Our Service is not intended for or directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to remove such data.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect product improvements, regulatory changes, or operational updates. The "Last Updated" date at the top indicates when changes were last made. For material changes, we will provide notification via email or through a prominent notice within the application before changes become effective.

16. Contact Us

For any privacy-related inquiries, requests, or concerns, you can reach out to us at:

• Email: [email protected]
• Contact Form: www.getyourcv.net/contact-us
• Postal Address: ENTALEQ SUARL, 75 Av. Kheireddine Pacha, Tunis 1073, Tunisia