Privacy Policy

Welcome to ZEMCV Builder. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and CV-building services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our service.

1. Information We Collect

Account Information

When you register, we collect your full name, email address, and a password (stored as an irreversible cryptographic hash). You may also provide a profile picture and contact phone number.

CV & Resume Data

To provide the service, we store the information you enter into your CV: work experience, education history, skills, certifications, languages, hobbies, and any other details you choose to include.

Payment & Transaction Data

We record credit purchases, including the amount paid, the number of credits acquired, transaction references, and payment status. We do not store full payment card numbers; card processing is handled by our third-party payment provider.

Usage Data

We automatically collect certain technical information, including your IP address, browser type, operating system, pages visited, features used, credit usage history, and timestamps of actions.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the ZEMCV BUILDER service
• Process your credit purchases and manage your account balance
• Generate and deliver PDF exports of your CV
• Send transactional emails such as account verification, password resets, and purchase receipts
• Respond to your support enquiries and feedback
• Monitor and analyse usage patterns to improve the service
• Detect, prevent, and address technical issues or abuse
• Comply with applicable legal obligations

We will not use your CV data to train AI models or sell it to third parties for marketing purposes.

3. Data Storage & Security

Your data is stored on secured servers. We implement industry-standard security measures including:

• Passwords stored as one-way cryptographic hashes (bcrypt) — never in plain text
• CSRF token protection on all forms
• Prepared SQL statements to prevent injection attacks
• Regular server security updates and monitoring

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share limited data only in the following circumstances:

• Payment Processors: Transaction details are shared with our payment provider solely to process your purchase.
• Email Service Providers: Your email address is shared with our mailing provider to deliver transactional emails.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal process.
• Business Transfer: In the event of a merger or acquisition, your data may be transferred to the new entity, subject to the same privacy protections.

5. Cookies

We use a minimal set of cookies necessary to operate the service:

• Session Cookies: Keep you logged in during your browser session.
• CSRF Cookies: Protect against cross-site request forgery attacks.
• Google Analytics (optional): If enabled by the site administrator, anonymous usage statistics may be collected via Google Analytics.

We do not use advertising cookies, tracking pixels, or third-party retargeting scripts.

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that inaccurate or incomplete data be corrected.
• Deletion: Request deletion of your account and all associated data.
• Portability: Export your CV data at any time from your dashboard.
• Objection: Object to certain processing of your personal data.

To exercise any of these rights, please contact us using the details in Section 9.

7. Data Retention

We retain your personal data for as long as your account remains active. When you delete your account:

• All CV data, profile information, and uploaded files are permanently deleted within 30 days.
• Payment transaction records may be retained for up to 7 years to comply with financial regulations.
• Anonymised usage statistics may be retained indefinitely in aggregated form.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Send a notification email to registered users
• Display a notice on our website

Continued use of the service after the effective date of any changes constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us: