Privacy Policy
Last Updated: August 25, 2026
This Privacy Policy explains how GetYourCV collects, uses, shares, and protects your personal data when you use our website, application, and related services.
We believe privacy policies should be easy to read and transparent. Below, you will find a summary of our core principles, followed by the complete policy details.
Our Privacy Principles
- Minimization: We only collect the personal data necessary to provide, secure, and improve GetYourCV.
- No Data Sales: We never sell your personal information or CV contents to third parties.
- No AI Model Training: We never use the content of your CV to train AI models.
- You Are the Author: Our AI tools suggest wording for the experience you enter — you decide what to keep, and the finished CV is yours.
- User Control: You remain in complete control of your data, with the ability to edit, export, or permanently delete your account at any time.
1. Introduction
This Privacy Policy applies to your use of the GetYourCV platform, including our website at www.getyourcv.net and our CV builder application at cvmaker.getyourcv.net (collectively, the "Service").
By accessing or using the Service, you acknowledge the practices described in this policy. If you have any questions or concerns, please contact us using the information provided at the bottom of this page.
2. Who We Are
GetYourCV is operated by ENTALEQ SUARL, a company registered in Tunisia ("GetYourCV", "we", "us", "our").
- Registered Address: 75 Av. Kheireddine Pacha, Tunis 1073, Tunisia
- Data Controller: ENTALEQ SUARL is the legal data controller responsible for processing your personal data under applicable data protection laws.
3. Information We Collect
We collect information to deliver our Service efficiently and safely. The data we collect falls into three main categories:
A. Information You Provide Directly
- CV & Cover Letter Content: Information you enter or upload into the builder to create your CV or cover letter, such as your full name, contact information, work experience, education, skills, languages, professional summary, and profile photo.
- Account Information: Name and email address when creating an account. You can build a CV on the free plan without registering, but a free account is required to download it, and an account is also required for paid plans.
- Support Messages: Correspondence and attachments sent to our support team.
B. Information Collected Automatically
- Usage & Device Data: IP address (used to infer general location), browser type, operating system, pages visited, feature usage, referring URLs, and system logs.
- Interaction Data: Aggregated and masked interactions (e.g., clicks, scrolling, mouse movements) used strictly to identify usability issues and technical bugs.
C. Information Received from Third Parties
- Payment Confirmations: Confirmation from our merchant of record regarding plan subscription status, transaction ID, email, and billing country.
- Single Sign-On (SSO): Basic profile information (such as name and email address) if you choose to register or log in via a third-party account provider.
Note on Sensitive Information: A CV may contain sensitive personal data (e.g., photo, date of birth, nationality, marital status, health/disability information). We do not require this information. If you voluntarily include sensitive details in your CV, you explicitly consent to our processing of this data solely to generate and store your CV. You can remove this data at any time by editing or deleting your CV.
4. How We Use Your Information
We process your personal data under lawful bases required by data protection regulations (such as GDPR):
| Purpose / Activity | Description | Legal Basis |
|---|---|---|
| Service Provision | Creating, saving, rendering, and exporting your CVs; managing your account and subscription. | Contractual necessity |
| AI Writing Assistance | Providing automated CV reviews, real-time wording suggestions, job tailoring, and spell-checking on the content you have entered. | Contractual necessity / Legitimate interest |
| Customer Support | Responding to requests, feedback, and technical inquiries. | Contractual necessity |
| Security & Integrity | Protecting against fraud, unauthorized access, abuse, and platform instability. | Legitimate interest |
| Product Improvement | Measuring usage, bug fixes, and optimization of platform features. | Legitimate interest / Consent (where required) |
| Service Communication | Sending transactional notices, updates, security alerts, and administrative messages. | Contractual necessity |
| Marketing | Sending product updates and tips (always with an optional opt-out/unsubscribe link). | Consent / Legitimate interest |
| Legal Compliance | Retaining business, tax, and accounting records as mandated by law. | Legal obligation |
5. AI Writing Assistance
We offer optional AI-assisted tools that help you review and improve the CV content you have written yourself — automated CV analysis, phrasing assistance, rephrasing, and spell-checking. These tools operate on the details you have already entered about your own background; we do not offer a service that writes a CV on your behalf.
- You Stay the Author: The AI suggests, you decide what to keep. No suggestion is applied to your CV without your action, and you remain the sole author of everything you send to an employer.
- Strict Confidentiality: Relevant CV text sent to our AI service providers is transmitted securely and handled exclusively for producing your requested suggestions or reviews.
- No AI Training: Our contracts with AI service providers strictly prohibit them from storing or using your personal data or CV content to train or fine-tune their AI models.
6. Cookies & Analytics
We use cookies and similar tracking technologies to ensure our website functions correctly, remember your preferences, and measure service performance.
- Essential Cookies: Necessary for core functionality (e.g., authentication, security, language settings). These cannot be disabled.
- Analytics Cookies: Help us understand aggregate traffic patterns and user interactions.
Analytics cookies are optional and, where local law requires it, are set only after you consent. Some are placed by third-party providers under their own privacy policies, and typically expire between 12 months and 2 years. We display no advertising on the Service and set no advertising cookies.
Your Control: You can manage or revoke your cookie preferences at any time using our website's cookie settings link in the footer or through your web browser settings. Blocking essential cookies will prevent sign-in and saving from working.
7. Payments
Paid plans are sold and processed by Dodo Payments, our Merchant of Record and the authorised reseller of our products and services. At checkout, Dodo Payments collects and processes your payment data directly as an independent data controller under its own privacy policy, and handles billing, invoicing and tax.
GetYourCV never receives, processes, or stores your full credit card details. We only receive limited transaction metadata (such as email address, plan type, billing country, and transaction reference) necessary to activate your access and maintain tax records.
8. Sharing Your Information
We do not sell, rent, or trade your personal data. We share data only with trusted service provider categories operating under strict data processing agreements:
- Cloud Infrastructure & Hosting: Database, file storage, and content delivery network providers.
- AI Service Providers: Secure processors used exclusively to fulfill AI-powered feature requests and automated CV reviews.
- Payment Processors: Authorized sellers of record handling transaction compliance, billing, and tax.
- Analytics & Performance Providers: Tools used to evaluate system performance and aggregate traffic metrics.
- Communication & Support Tools: Platforms used to send email notifications and manage customer support tickets.
- Legal Authorities & Professional Advisers: Disclosures made only when legally mandated, or to defend legal claims.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity with prior notice.
9. International Data Transfers
GetYourCV is operated from Tunisia, with cloud infrastructure and third-party service providers located in the European Economic Area (EEA), the United Kingdom, and the United States.
When personal data is transferred across international borders, we ensure appropriate safeguards are implemented in compliance with applicable laws, including the European Commission's Standard Contractual Clauses (SCCs), UK Addendums, and robust technical encryption protocols (in transit and at rest).
10. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy:
- Active Account Data: CV contents and account details are stored for as long as your account remains active.
- Guest CV Data: If you build a CV without an account, it is stored in your own browser on that device and is not uploaded to our servers. It stays there until you sign in and save it to your account, or until you delete it or clear your browser data. Because it never reaches us, we cannot read, recover, or delete it for you.
- Account Deletion: If you delete your account, your CVs and personal data are permanently deleted from our active databases.
- Financial & Legal Records: Transaction, tax, and accounting logs are retained for statutory retention periods (up to 10 years).
- Support Records: Customer support communications are retained for up to 3 years.
11. Security
We implement strict technical and organizational measures to safeguard your personal data:
- Encryption: Data in transit is encrypted using modern TLS/HTTPS protocols; database backups and sensitive storage are encrypted at rest.
- Access Controls: Strict role-based access limits employee access to production databases.
- Incident Response: In the event of a confirmed data breach affecting your rights, we will notify you and relevant supervisory authorities as required by law.
12. Your Rights
Depending on your jurisdiction (e.g., under GDPR or regional privacy frameworks), you possess the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Update or correct inaccurate personal details.
- Erasure ("Right to be Forgotten"): Request permanent deletion of your data (or delete your account directly from your settings).
- Portability: Export your CV and data in a structured, machine-readable format.
- Restriction & Objection: Object to processing based on legitimate interests or restrict specific data handling activities.
- Withdraw Consent: Revoke consent previously given for analytics, marketing, or cookie tracking.
- Lodge a Complaint: Contact your local Data Protection Authority (e.g., Instance Nationale de Protection des Données Personnelles (INPDP) in Tunisia, or your national authority in the EEA/UK).
To exercise any of these rights, email us at support@getyourcv.net. Requests are processed free of charge within 30 days.
13. Additional Rights for U.S. Residents
If you live in California or another U.S. state with a comprehensive privacy law, you have the right to know what personal information we collect, to request its deletion or correction, to receive a copy of it, and to opt out of targeted advertising. We will never discriminate against you for exercising any of these rights — the Service, its price, and its quality remain exactly the same.
On "selling" and "sharing": we do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising as those terms are defined under the California Consumer Privacy Act and comparable state laws. We display no advertising on the Service and set no advertising identifiers. We use analytics tools to measure how the product is used; you can withdraw consent for these at any time through our cookie settings, or by emailing support@getyourcv.net and we will action it for you.
We do not use sensitive personal information to infer characteristics about you, and we do not knowingly sell or share the personal information of anyone under 16. You may use an authorized agent to submit a request on your behalf; we may ask for proof of their authority and verify your identity before we act.
14. Children's Privacy
Our Service is not intended for or directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to remove such data.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect product improvements, regulatory changes, or operational updates. The "Last Updated" date at the top indicates when changes were last made. For material changes, we will provide notification via email or through a prominent notice within the application before changes become effective.
16. Contact Us
For any privacy-related inquiries, requests, or concerns, you can reach out to us at:
- Email: support@getyourcv.net
- Contact Form: www.getyourcv.net/contact-us
- Postal Address: ENTALEQ SUARL, 75 Av. Kheireddine Pacha, Tunis 1073, Tunisia