Privacy Policy

1. Data controller

The data controller is AbanosCV (operator of abanoscv.com). For privacy requests, email privacy@abanoscv.com. We aim to respond within 30 days.

2. Personal data we process

• Account data: name, email address, password hash, email verification status, role, and account timestamps.
• CV and career data: uploaded CVs, parsed CV content, preferences (titles, location, salary, visa), match results, tailored drafts, cover letters, scorecards, and application tracker entries.
• Usage data: feature usage (e.g. tailor, fit critic, scout, interview coach), approximate last-seen activity for product analytics and admin operations, and technical logs needed to keep the Service secure.
• Consent records: cookie preferences, signup acceptance of Terms/Privacy, and application-consent checkboxes (reviewed + submit).
• Communications: verification, password-reset, and transactional emails; optional newsletter signup if you opt in.

We do not require special-category data (e.g. health, politics, religion). Please do not put such data in your CV unless you choose to; if you do, you process it at your own risk and we treat it as content you uploaded.

3. Purposes and legal bases (GDPR Art. 6)

• Provide the Service (create account, store CV, match jobs, tailor, track applications) — legal basis: contract (Art. 6(1)(b)).
• Security, fraud prevention, email verification, password reset — legal basis: legitimate interests (Art. 6(1)(f)) and/or contract.
• AI assistance (scorecard, match explanations, fit critic, scout, interview coach, tailored text) using your CV and job text — legal basis: contract and, where required for optional analytics/marketing cookies, consent (Art. 6(1)(a)).
• Application logging only after your explicit checkboxes — legal basis: consent /contract. We do not auto-submit applications to employers.
• Product improvement and admin usage statistics (aggregated or account-level ops) — legal basis: legitimate interests; non-essential cookies/trackers only with consent.
• Newsletter / marketing email — only with consent; you can withdraw anytime.
• Legal compliance — Art. 6(1)(c) where applicable.

4. AI processing

To deliver matching and drafting features, we send relevant portions of your CV JSON and job descriptions to AI providers acting as processors under our instructions. Prompts are designed not to invent credentials; you remain responsible for reviewing every application before you submit it externally.

We do not sell your CV content. We do not use your content to train public foundation models beyond what a contracted provider may do under its enterprise/data-processing terms; if a provider’s terms change, we will update this policy.

5. Cookies and similar technologies

Essential cookies (session/auth and storing your cookie choice) are required for the Service to work. Analytics and marketing cookies are off by default and only set if you opt in via our consent banner. Details: Cookie Policy.

6. Recipients and processors

• Hosting and infrastructure providers (e.g. VPS / cloud where abanoscv.com runs).
• Email delivery (transactional SMTP for verification and password reset).
• AI inference providers used to generate scorecards, matches, and drafts.
• Job board / ATS public feeds we query on your behalf (we send search criteria, not your full CV, unless you yourself apply).

We do not sell personal data.

7. International transfers

Some processors may process data outside the EEA/UK. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or an adequacy decision, and we limit data to what is necessary for the feature you use.

8. Retention

• Account, CV, matches, and tracker data: kept while your account is active.
• After account deletion request: we delete or anonymize personal data within 30 days, except records we must keep for security, dispute, or legal obligations (typically up to 12 months for logs).
• Password-reset and email-verification tokens: short-lived (hours), then invalidated.
• Cookie consent record: up to 12 months, then we ask again.

9. Your rights (GDPR)

If you are in the EEA/UK (or otherwise entitled), you may request:

• Access to your personal data
• Rectification of inaccurate data
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability (machine-readable export of account/CV data we hold)
• Objection to processing based on legitimate interests
• Withdrawal of consent at any time (without affecting prior lawful processing)

Email privacy@abanoscv.com with the subject “GDPR request” and enough detail for us to verify your identity. You also have the right to lodge a complaint with your local supervisory authority.

10. Children

The Service is for adults seeking employment. We do not knowingly collect data from anyone under 16. If you believe a minor created an account, contact us and we will delete it.

11. Security

We use HTTPS, hashed passwords, short-lived verification/reset tokens, and access controls. No method of transmission or storage is 100% secure; please use a unique password and keep your email account safe.

12. Changes

We may update this policy. Material changes will be reflected by the “Last updated” date and, where appropriate, a notice in the product or by email. Continued use after the effective date means you have read the updated policy; where consent is required, we will ask again.

13. Contact

Privacy / DSR: privacy@abanoscv.com. Also see our Terms of Service and Cookie Policy.