1. Who we are

CV Builder SA (“we”, “us”, or “our”) operates the website cvbuildersa.co.za. We are a South African business and this policy is written to comply with the Protection of Personal Information Act, 2013 (POPIA).

For any privacy questions, contact us at: support@cvbuildersa.co.za

2. What information we collect

CV data — name, email address, phone number, location, work history, education, and skills you enter into the builder.
Payment information — your email address and payment reference from Paystack. We do not store card details; all card processing is handled by Paystack.
Usage data — basic server logs (IP address, browser type, pages visited) for security and debugging.

3. How we use your information

To generate, store, and deliver your CV PDF.
To send you your permanent download link via email.
To send a one-time reminder email if you start but do not complete your CV (abandonment recovery). This email is cancelled when you pay.
To send a single re-engagement email approximately 6 months after purchase, reminding you that you can update your CV.
To process your payment via Paystack.

We do not sell your personal information to third parties.

4. How we store your data

Your CV data is stored in a secure database (Supabase, hosted in the EU) linked to your payment reference. This allows you to access your permanent download link at any time.

While you are building your CV (before payment), it is saved in your browser’s localStorage. Once you enter a valid email address, we also keep a saved draft of your CV on our servers so you can continue on any device using the private link we email you. The link contains a random token; we store only a one-way hash of it, and anyone holding the link can open the draft, so please treat it like a password. Drafts are deleted automatically after 90 days without activity (and 30 days after you buy), and you can delete yours at any time by choosing “Clear all fields” in the builder or by emailing us.

5. Third-party services

Paystack — payment processing. See their privacy policy.
Resend — transactional email delivery.
OpenAI — AI features (CV import, summary generation, cover letter, ATS scoring). Your CV data may be sent to OpenAI’s API for processing. OpenAI does not use API data to train its models.
Vercel — website hosting and serverless functions.

6. Your rights under POPIA

As a data subject under POPIA, you have the right to:

Request access to the personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your personal information.
Object to the processing of your personal information.
Withdraw consent at any time (including unsubscribing from emails).

To exercise any of these rights, email us at support@cvbuildersa.co.za. We will respond within 5 business days.

7. Email communications & unsubscribe

We send emails only for the purposes described above. You may unsubscribe from re-engagement emails at any time by emailing support@cvbuildersa.co.za with the subject “Unsubscribe”. We will process your request within 2 business days, in accordance with POPIA.

8. Data retention

We retain purchased CV data for as long as your permanent download link is active. Unpaid saved drafts are removed after 90 days of inactivity. If you request deletion, we will remove your data within 5 business days.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the latest revision. Continued use of our service after changes constitutes acceptance of the updated policy.

10. Contact

CV Builder SA
Email: support@cvbuildersa.co.za

Privacy Policy