Privacy Policy

Privacy Policy

Last Updated: February 2026

At CV60, your privacy is our top priority. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding your data. By using CV60, you consent to the practices described in this policy.

In Plain English We collect your name, email, and career details to generate your CV. We send it via email and automatically delete everything after 30 days. We don't sell your data.

1. Information We Collect

Personal Information You Provide

  • Full Name: Used to personalise your CV
  • Email Address: To deliver your CV and communicate with you
  • Career Details: Work experience, education, skills, and certifications to populate your CV

Payment Information

  • Payment details are processed securely by PayFast (SA's leading payment gateway)
  • We do NOT store your credit card or banking details on our servers
  • PayFast handles all payment processing to PCI DSS standards

Automatically Collected Information

  • Usage data: Pages visited, time spent, browser type, IP address
  • Technical data: Device type, operating system, referring website
  • This helps us improve the service and detect abuse

2. How We Use Your Information

  • Generate Your CV: Template-based CV generation using the details you provide
  • Deliver Your CV: Send PDF via email to the address you provide
  • Process Payments: Securely handle transactions through PayFast
  • Customer Support: Respond to enquiries and provide assistance
  • Refunds: Process refund requests within our 7-day guarantee period
  • Abuse Prevention: Detect and prevent fraudulent activity or misuse
  • Legal Compliance: Comply with South African laws (POPIA, CPA, Tax Administration Act)

3. Data Retention

Automatic Deletion All personal information — name, email, CV content — is automatically deleted after 30 days. No manual request needed.

After 30 days your data is permanently removed. We retain the following:

  • Payment records: Retained for 5 years (SARS tax compliance)
  • Aggregated analytics: Anonymous statistics with no personal identifiers

4. Third-Party Services We Use

Afrihost (South Africa)

  • Purpose: Email delivery — sends your CV PDF via SMTP
  • Data Shared: Your email address, name, and PDF attachment
  • Compliance: South African company, POPIA compliant

PayFast (South Africa)

  • Purpose: Payment processing
  • Data Shared: Name, email, payment amount
  • Compliance: PCI DSS Level 1 certified

Neon / Vercel (USA)

  • Purpose: Database storage and website hosting
  • Data Shared: All data you provide (encrypted at rest)
  • Compliance: GDPR and POPIA compliant with adequate data protection
Cross-Border Data Transfers Some service providers are located outside South Africa (USA). We ensure they have adequate data protection measures in place, as required by POPIA Section 72.

5. Your Rights (POPIA)

Under South Africa's Protection of Personal Information Act (POPIA), you have the following rights:

Right to Access

Right to Correction

  • Request correction of inaccurate or incomplete data

Right to Deletion

  • Request immediate deletion before the 30-day auto-delete
  • Email us with your Job ID

Right to Object

  • Object to processing of your data for specific purposes
  • Note: This may prevent us from delivering your CV

Right to Lodge a Complaint

6. Data Security

  • HTTPS Encryption: All data in transit is encrypted (SSL/TLS)
  • Database Encryption: Data stored at rest is encrypted
  • Access Controls: Limited access to personal data
  • Automated Deletion: 30-day auto-delete reduces exposure risk
  • No Password Storage: No accounts means no password vulnerabilities
Data Breach Notification In the unlikely event of a data breach, we will notify affected users and the Information Regulator within 72 hours, as required by POPIA.

7. Children's Privacy

CV60 is not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will be revised. We encourage you to review this page periodically.

9. Information Officer

As required by POPIA, we have appointed an Information Officer responsible for data protection compliance:

Information Officer: CV60 Team
Email: no-reply-cv60@playwithbits.co.za
Response Time: Within 3 business days

10. Contact Us

Questions, concerns, or requests regarding your personal information:

CV60 Support
Email: no-reply-cv60@playwithbits.co.za
Back to Home Terms & Conditions