CVLift ("we", "us") helps you improve your CV. We take the protection of your personal information seriously and process it in line with the Protection of Personal Information Act, 2013 (POPIA). This policy explains what we collect, why, and your rights.
1. Who is responsible
The responsible party is [registered business name], [registration number], [physical address], South Africa. You can reach our Information Officer by sending a support request; we'll reply by email.
2. What we collect
- Your CV: the file you upload and the text we read from it. A CV typically contains your name, contact details, work history, education and skills. We don't keep the uploaded file itself; we keep the text we need to produce your order.
- Order details: the upgrade and design you chose, an optional target role, and order status.
- Your email address at checkout: used for your payment receipt and to help if something goes wrong with your order.
- Payment confirmation: our payment partner tells us whether payment succeeded and gives us a payment reference. We never receive or store your card or bank details.
- Support requests: if you contact us through our help page, your email address, the topic, your message and any order reference you give us.
- Technical data: limited server logs (such as IP address and request times) used for security and abuse prevention. Logs do not contain your CV text or email address.
We do not need special personal information (such as health, religion or ID numbers). Please remove it from your CV before uploading if it isn't relevant to the jobs you're applying for.
3. Why we use it
- To produce your upgraded CV, preview and PDF in the design you choose: the service you asked for (performance of a contract).
- To process and confirm payment and keep the financial records the law requires.
- To answer your support requests.
- To keep the service secure and prevent abuse (our legitimate interest).
We do not sell your information, use it for marketing, or use your CV for any purpose other than producing your order.
4. Who we share it with
- Processing providers: to read, rewrite and lay out your CV we use trusted third-party processing providers, some of which are located outside South Africa. They process your information only on our instructions, only to provide the service, and under confidentiality and data protection obligations that offer a level of protection comparable to POPIA. Where this involves transferring your information outside South Africa, we do so under section 72 of POPIA, because the transfer is necessary to provide the service you requested and the recipients are bound by adequate data protection obligations.
- Payments: our payment partners (PayFast or Yoco, depending on the option offered at checkout) process your payment and receive your email address.
- Hosting: [hosting provider and region] hosts our servers and stores your files while they are retained.
- Authorities: only where the law requires it.
5. How long we keep it
6. Security
Orders are protected by a private access key stored only in your browser. Downloads use short-lived signed links, traffic is encrypted in transit (HTTPS), and access to our servers is restricted. No system is perfectly secure; if we become aware of a breach affecting your information we will notify you and the Information Regulator as POPIA requires.
7. Cookies and browser storage
We don't use advertising or tracking cookies. We store your order's access key in your browser's storage so you can return to your order (for example after paying). It is removed from your browser after the retention period.
8. Your rights
Under POPIA you may:
- ask whether we hold your personal information and request a copy;
- ask us to correct or delete it (we can delete your files before the 7 days are up on request);
- object to processing in certain circumstances; and
- lodge a complaint with the Information Regulator (South Africa): inforegulator.org.za.
To exercise these rights, send us a support request with your order reference and we'll reply by email.
9. Changes
We may update this policy from time to time. The "last updated" date above shows when it last changed.