Privacy Policy

CV Generator (cvmaker.work) is an online platform that helps individuals and organisations in Nigeria and beyond create, format, and download professional CVs. We are the data controller for the personal information you provide when using our service.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and what rights you have over it. It applies to all users of cvmaker.work, including free account holders, Individual plan subscribers, and Enterprise plan subscribers.

By creating an account or using our service, you agree to the practices described in this policy.

We collect two categories of information: information you give us directly, and basic technical information generated automatically when you use our website.

We collect only what is necessary to provide the service. Sensitive optional fields such as date of birth, gender, and photo are entirely voluntary and can be left blank without affecting core functionality.

We use the information we collect for the following purposes:

• To provide the service — creating and storing your CV profile, generating PDF downloads, and enabling all features available under your subscription plan.
• To verify your identity — confirming your email address when you register and authenticating you when you log in.
• To process payments — activating and managing your subscription, and sending you a confirmation email when a payment is successful or when your subscription is close to expiry.
• To power AI features — your CV content is used to generate AI-assisted writing suggestions, tailored CV versions, and imported data. See Section 4 for full details.
• To send service-related communications — account confirmation, password reset, subscription activation, and expiry reminder emails. We do not send promotional emails unless you opted in at registration, and you can unsubscribe at any time.
• To improve the service — analysing aggregated, anonymised usage patterns to understand how features are being used and to fix issues.
• To comply with legal obligations — retaining transaction records as required by Nigerian financial and tax regulations.

We do not use your CV data or personal information for advertising, profiling, or any purpose unrelated to providing you with the CV Generator service.

CV Generator includes several AI-powered features for subscribers, including AI writing assistance, CV import, skills generation, and role-tailored CV creation. Here is how your data is handled when you use these features:

• What is sent to the AI: Only the CV content needed for the specific feature — for example, your job titles and certifications for skill generation, or your full CV text when importing a document. Your password, payment information, and contact details are never sent to any AI service.
• AI-generated content is a suggestion: All AI output is presented to you for review. You remain in full control of what is saved to your profile. We do not automatically publish or act on AI suggestions without your action.
• Uploaded CV files: When you upload a PDF or DOCX file for AI import, the file is processed to extract text and then deleted from our servers. We do not permanently store the original uploaded file.
• AI service providers: We use reputable third-party AI providers to power these features. These providers process your data under strict usage policies that prohibit them from using your content to train their models or for any purpose other than returning a response to us. We select AI providers who are bound by appropriate data processing agreements.
• Usage limits: AI features are subject to monthly usage limits depending on your subscription plan. These limits exist to manage service costs and ensure fair use for all subscribers.

If you do not wish your CV content to be processed by AI, you may use the platform without activating any AI features. All core CV building and PDF download functionality works without AI.

We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:

All third-party service providers we use are bound by data processing agreements and are required to use your data only for the purpose of providing services to us on your behalf.

We retain your personal data for as long as your account is active or as long as is necessary to provide the service. More specifically:

• Account and CV data — kept for as long as your account exists. If you request account deletion, your account and all associated CV data will be permanently deleted, usually within 14 days of your request.
• Uploaded CV files — deleted from our servers immediately after AI processing is complete. They are not retained.
• Payment and subscription records — retained for a minimum of 6 years to comply with Nigerian financial recordkeeping requirements, even after account deletion. This data does not include your CV content.
• Email communications — retained as needed for customer service purposes.
• Technical and usage logs — typically retained for 90 days and then automatically purged.

When data is deleted, it is permanently removed from our systems and cannot be recovered.

We take the security of your personal information seriously and apply appropriate technical and organisational measures to protect it, including:

• All data in transit between your browser and our servers is encrypted using HTTPS/TLS.
• Your password is stored using strong one-way encryption (hashing). We cannot see or recover your password — only you know it.
• Payment card details are never transmitted to or stored on our servers; they go directly to our payment processor’s secure infrastructure.
• Access to account and CV data is restricted to the account owner and, where necessary for support, authorised staff who are bound by confidentiality obligations.
• Email verification is required at registration to prevent unauthorised account creation.

While we take reasonable precautions, no online system is completely secure. We encourage you to use a strong, unique password for your CV Generator account and to keep it confidential.

If you believe your account has been compromised, please contact us immediately using the details in Section 12.

Under the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR), you have the following rights regarding your personal data:

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within 30 days. There is no charge for making a reasonable request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

We use cookies to make the website function correctly and to keep you logged in to your account. Specifically, we use:

• Session cookies — these are essential for keeping you logged in while you use the dashboard. They expire when you close your browser or log out.
• Persistent login cookies — if you choose “Remember me” at login, a cookie is stored on your device to keep you signed in across browser sessions. You can clear this by logging out.
• Security cookies — small tokens used to protect forms on the website from cross-site request forgery (CSRF). These are essential for security and cannot be disabled.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies that follow you across the web. The cookies we use are strictly functional and necessary for the service to work.

CV Generator is designed for use by adults seeking employment or managing career documents. Our service is not intended for anyone under the age of 16. We do not knowingly collect personal data from children under 16.

If you believe a child has created an account on our platform, please contact us at the address in Section 12 and we will take steps to delete the account and associated data promptly.

We may update this Privacy Policy from time to time to reflect changes in our service, technology, or legal requirements. When we make material changes, we will:

• Update the “Effective Date” at the top of this page.
• Notify registered users by email at least 14 days before the change takes effect, where the change affects how we use your personal data.
• For minor clarifications or administrative updates, we will update this page without a separate notification.

We encourage you to review this page periodically. Continued use of the service after a change takes effect constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a concern about your personal data, please get in touch: