Privacy Policy

Last Updated: February 2026

At CV60, your privacy is our top priority. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding your data. By using CV60, you consent to the practices described in this policy.

        In Plain English: We collect your name, email, and career details to generate
        your CV using professional templates. We send it via email and automatically delete everything after 30 days. We don't
        sell your data.
      

1. Information We Collect

Personal Information You Provide:

Full Name: Used to personalize your resume
Email Address: To deliver your resume and communicate with you
Career Details: Work experience, education, skills, and certifications to populate your CV

Payment Information:

Payment details: Processed securely by PayFast (South Africa's leading payment gateway)
We do NOT store your credit card or banking details on our servers
PayFast handles all payment processing according to PCI DSS standards

Automatically Collected Information:

Usage data: Pages visited, time spent, browser type, IP address
Technical data: Device type, operating system, referring website
This helps us improve our service and detect abuse

2. How We Use Your Information

We use your personal information for the following purposes:

Generate Your CV: Template-based CV generation using the details you provide
Deliver Your Resume: Send PDF via email to the address you provide
Process Payments: Securely handle transactions through PayFast
Customer Support: Respond to inquiries and provide assistance
Refunds: Process refund requests within our 7-day guarantee period
Abuse Prevention: Detect and prevent fraudulent activity, spam, or misuse
Legal Compliance: Comply with South African laws (POPIA, CPA, Tax Administration Act)

3. Data Retention

        Automatic Deletion: All personal information (name, email, CV content)
        is automatically deleted after 30 days. No manual request needed.
      

After 30 days, your data is permanently removed from our systems. However, we retain the following:

Payment records: Retained for 5 years (SARS tax compliance requirement)
Aggregated analytics: Anonymous statistics (e.g., "100 resumes generated this month") with no personal identifiers

4. Third-Party Services We Use

To provide CV60's services, we work with trusted third-party providers. Your data may be processed by:

Afrihost (South Africa)

Purpose: Email delivery (send your CV PDF via SMTP)
Data Shared: Your email address, name, and PDF attachment
Privacy Policy: https://www.afrihost.com/privacy-policy
Compliance: South African company, POPIA compliant

PayFast (South Africa)

Purpose: Payment processing
Data Shared: Name, email, payment amount
Privacy Policy: https://www.payfast.co.za/privacy-policy/
Compliance: PCI DSS Level 1 certified

Neon/Vercel (USA)

Purpose: Database storage and website hosting
Data Shared: All data you provide (encrypted at rest)
Privacy Policy: Vercel Privacy | Neon Privacy
Compliance: GDPR and POPIA compliant with adequate data protection

        Cross-Border Data Transfers: Some of our service providers are located outside South Africa
        (USA).
        We ensure they have adequate data protection measures in place, as required by POPIA Section 72.
      

5. Your Rights (POPIA)

Under South Africa's Protection of Personal Information Act (POPIA), you have the following rights:

Right to Access

Request a copy of all personal data we hold about you
Email: no-reply-cv60@playwithbits.co.za

Right to Correction

Request correction of inaccurate or incomplete data
Contact us and we'll update your information

Right to Deletion

Request immediate deletion of your data (before the 30-day auto-delete)
Email: no-reply-cv60@playwithbits.co.za with your Job ID

Right to Object

Object to processing of your data for specific purposes
Note: This may prevent us from delivering your resume

Right to Withdraw Consent

You can withdraw consent at any time
This will trigger immediate deletion of your data

Right to Lodge a Complaint

File a complaint with South Africa's Information Regulator
Email: complaints.IR@justice.gov.za
Website: https://www.justice.gov.za/inforeg/

6. Data Security

We implement industry-standard security measures to protect your data:

HTTPS Encryption: All data transmitted between your browser and our servers is encrypted (SSL/TLS)
Database Encryption: Data stored in our database is encrypted at rest
Access Controls: Limited access to personal data (only authorized personnel)
Automated Deletion: 30-day auto-delete reduces exposure risk
No Password Storage: We don't require user accounts, so no password vulnerabilities

        Data Breach Notification: In the unlikely event of a data breach, we will notify affected users
        and the Information Regulator within 72 hours, as required by POPIA.
      

7. Children's Privacy

CV60 is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top will be revised. We encourage you to review this page periodically.

9. Information Officer

As required by POPIA, we have appointed an Information Officer responsible for data protection compliance:

Information Officer: CV60 Team
Email: no-reply-cv60@playwithbits.co.za
Response Time: Within 3 business days

10. Contact Us

If you have any questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact us:

CV60 Support
Email: no-reply-cv60@playwithbits.co.za

Back to Home View Terms & Conditions