Privacy notice

Who to contact

StudentCVBuilder is the service name. Contact studentcvbuilder@gmail.com or +233 24 119 2064, Takoradi, Ghana, about your personal data. A verified registered legal identity and full business address have not yet been published here. Institutions should obtain the contracting entity details and agree controller/processor responsibilities before providing student records. This notice is not a GDPR certification.

What information is processed

• Career content you enter or upload: contact details, education, employment, skills, CV text, job descriptions and answers submitted for AI assistance.
• Account and institutional information: name, email, password credentials, institution association, invitations, access status and settings.
• Transaction information: payment reference, amount, status and payer details. Paystack handles payment credentials; our application records transaction results.
• Support messages, privacy requests and operational records, including activity counts and security/rate-limiting information.
• Optional analytics, advertising and referral attribution on eligible public pages when you enable the relevant cookie category.

Avoid including sensitive information or another person’s data unless it is necessary and you have authority to provide it.

Purposes and legal basis

We process information to provide requested tools and account access, handle payments, answer enquiries, protect the service and report institutional activity. Optional analytics and advertising require your cookie choice. A complete, legally reviewed purpose-by-purpose lawful-basis register is not yet published. Institutions must agree their instructions, legal basis and data-processing terms before rollout; acceptance of this notice is not blanket consent to all processing.

Where your documents go

Some drafts are saved in your browser. Account-backed CVs, versions and institutional records can also be stored on the server. Clearing browser storage does not delete those records. Files you download remain on your device.

My Private Vault encrypts explicitly saved copies in the browser using a separate passphrase. The service does not receive that passphrase. Keep it safely: losing it prevents recovery of those encrypted copies. This protection does not cover ordinary drafts, account identities, payments, analytics or text submitted to AI. The application and AI service read AI inputs to generate a response.

AI and service providers

AI requests can use Google Gemini or a configured AI gateway and its selected model provider. Provider retention, processing countries and training terms depend on the selected service and account settings; no universal no-training or zero-retention promise is made. Review the service-provider inventory and its confirmation limits before institutional use. The inventory also covers payments, database, email, rate limiting, analytics and advertising.

Provider processing may take place outside Ghana or your country. A complete deployment-specific transfer register and safeguards have not yet been published. Request those details and a data-processing agreement before transferring institutional records.

Access, correction, export and deletion

Edit your draft in the builder. Signed-in students can use Career Data Management & Privacy for saved-career-data export and deletion controls, and My Private Vault for encrypted backups. These controls have a defined scope; an export is not necessarily every record held by the service.

For access, correction, deletion, portability, restriction or objection requests, email studentcvbuilder@gmail.com from your account address where possible. Identify the requested action and account; do not email a password, vault passphrase or unnecessary identity documents. We may need proportionate identity checks before disclosing or changing records. Applicable rights and deadlines depend on the governing law. Where GDPR applies, requests are ordinarily handled within one month, with lawful exceptions or extensions explained to you.

Account-wide erasure requests require review of billing, support, providers and backups. A request being recorded does not mean those systems have already been erased. See retention and deletion scope.

Cookies and withdrawal

Optional categories start off until you make a choice. Cookie settings lets you change or withdraw that choice. Withdrawal reloads the page to stop previously loaded optional scripts. It does not undo earlier processing or erase cookies controlled by another domain. Read the cookie policy. Browser Do Not Track is not used as a substitute for these controls.

Security and complaints

Use the HTTPS site and protect your device and credentials. Vault encryption has the limited scope described above; no website or storage system can guarantee absolute security. Report suspected data issues through the privacy contact. You may also complain to the Data Protection Commission of Ghana or the supervisory authority competent for your location. These rights do not depend on buying a subscription.