Privacy Notice

1. Who we are

CVApply AI ("we", "us") operates cvapplyai.online and acts as the data controller for personal data processed through the Service. We are based in Peshawar, Pakistan.

2. Data we collect

• Account data: name, email address, password hash, country.
• Resume & profile data: resumes, work history, education, skills, and preferences you upload.
• Application data: jobs saved, applications submitted, cover letters generated.
• Support & messaging data: messages you send us; optional Telegram chat ID for notifications.
• Usage & device data: IP address, browser, device identifiers, log data, and usage telemetry.

3. How we use your data

• Provide the Service (contract performance)
• Personalize job matches and AI outputs (legitimate interests)
• Send transactional notifications (contract performance)
• Prevent fraud and abuse, secure the Service (legitimate interests)
• Comply with legal obligations (legal obligation)
• Send optional marketing where you have opted in (consent)

4. Who we share data with

• Paddle — our Merchant of Record for subscription sales, payments, tax compliance, and invoicing.
• Supabase / Lovable Cloud — hosting, database, authentication, and storage.
• Google (Gemini API) and other AI providers — to generate AI outputs from your input.
• n8n automation service and Telegram — where you opt into notifications and automated application workflows.
• Professional advisers and authorities where required by law.

5. International transfers

Our providers may process data outside your country, including in the US and EU. Where required, we rely on Standard Contractual Clauses or adequacy decisions as safeguards.

6. Data retention

We keep your account and content for as long as your account is active. When you delete your account, we delete or anonymise personal data within 30 days, except where retention is required by law.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability of your data, or object to processing. Where processing is based on consent, you may withdraw consent at any time. Contact us at support@cvapplyai.online. If you are in the UK/EEA, you may also lodge a complaint with your supervisory authority. We aim to respond within 30 days.

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, and row-level security on our database. No system is 100% secure, but we work to protect your data.

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising cookies. You can control cookies through your browser settings.

10. Contact

Questions about this notice? Email support@cvapplyai.online.