Privacy Policy

CVamp is a CV tailoring service operating from South Africa. For the purposes of POPIA, CVamp is the responsible party for the personal information described below. You can reach us about anything in this policy at privacy@cvamp.co.za.

• Everything inside your CV. Your name, contact details, employment history, education, skills, and any other personal information you have chosen to include in the file you upload.
• Job descriptions you paste or link. The text of the posting you are applying for, and the source URL where applicable.
• Output we generate for you. Your tailored CV, cover letter drafts, and Skills Match Score results.
• Account information. Your email address and, if you apply for the student rate, your university email address or student number for verification.
• Limited technical information. A hashed device identifier and your IP address, used only to apply free-tier limits and to detect abuse.

We use your personal information only to provide the service, specifically to:

• generate a tailored CV and cover letter from your existing experience;
• calculate your Skills Match Score against a specific job posting;
• save your past results so you can revisit and re-download them;
• create and manage your account, and process payments for paid plans;
• enforce free-tier limits and protect the service from abuse.

We do not sell your personal information. We do not share your CV content or job descriptions with third parties for marketing, advertising, recruitment, or any purpose other than delivering the service you asked for.

• AI provider. The text of your CV and the job description is sent to an AI model provider through a paid AI gateway in order to produce the tailored output. This transfer is necessary to provide the service and happens only when you ask for a CV to be tailored.
• Hosting and database. Your account and saved documents are stored with our cloud hosting and database provider.
• Payments. Card payments are processed by Paystack. CVamp does not receive or store your card details.

Some of these providers process data outside South Africa. We rely on their contractual commitments to protect your information to a standard comparable to POPIA.

• Guest use. If you use CVamp without creating an account, your uploaded CV, job description, and tailored output are stored temporarily against your browser session and automatically deleted 48 hours after creation if no account is created.
• If you create an account. Anything from your guest session is attached to your new account, and your CVs, job descriptions, and tailored outputs are kept while your account is active so your dashboard works.
• Deletion. You can delete any individual tailored CV from your dashboard at any time. To delete your account and everything associated with it, email privacy@cvamp.co.za from your account email address. We action deletion requests within 30 days, keeping only what we are legally required to keep, such as basic payment records.

You have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information, subject to any legal retention obligation;
• object to our processing of your information on reasonable grounds;
• withdraw consent where our processing relies on it.

To exercise any of these rights, email privacy@cvamp.co.za. We may ask you to confirm your identity before we act on a request, and we will respond within a reasonable period.

We take reasonable technical and organisational measures to protect your information. Data is encrypted in transit, access to stored data is restricted by per-account database access rules, and administrative access is limited to what is needed to operate the service. No online service can promise absolute security, and we do not claim to.

For any privacy question, request, or complaint, contact us at privacy@cvamp.co.za. If we do not resolve your concern to your satisfaction, you may lodge a complaint with South Africa's Information Regulator:

Information Regulator (South Africa)
Email: complaints.IR@justice.gov.za
Website: inforegulator.org.za

We may update this policy as the service changes. The effective date at the top will always reflect the current version, and if we make a material change to how your personal information is used, we will notify account holders by email before it takes effect.