Privacy Policy

Personal Information We Collect

We collect personal information directly provided by you, automatically collected, or obtained from third-party services:

• Account Information: Name, email address, account credentials, payment information, and transaction history.
• Resume Information: Content of resumes submitted for optimization.
• Communications: Information provided when you contact us, including your messages and contact details.
• Log Data: IP addresses, browser types, timestamps, referring/exit pages, operating system details, clickstream data, language preferences, and device settings automatically sent by your device.
• Usage Data: Features used, time spent on features, actions taken within the app, and error logs.
• Device Information: Device type, operating system, and unique device identifiers.
• Cookies and Tracking Technologies: Essential, functional, analytical, and advertising cookies, web beacons, pixels, and similar technologies used to enhance user experience and service delivery.
• Third-Party Service Information: Information collected when users log in or interact with third-party services such as Google or LinkedIn.

How We Use Your Personal Information

We process personal information based on legal grounds including performance of a contract, legitimate interests, consent, and legal obligations:

• Providing and Enhancing Services: To deliver and improve our resume optimization services (Legal Basis: Performance of Contract and Legitimate Interests).
• Communicating with Users: Regarding account management, updates, customer support, and inquiries (Legal Basis: Performance of Contract and Legitimate Interests).
• Analyzing User Behavior: To improve service functionality and user experience (Legal Basis: Legitimate Interests).
• Security and Fraud Prevention: Ensuring the security and integrity of our services (Legal Basis: Legitimate Interests).
• Compliance: Meeting legal and regulatory obligations (Legal Basis: Legal Obligation).
• Marketing: Sending relevant marketing communications, with user consent where required.

Disclosure of Personal Information

We share your personal information:

• With GDPR-compliant AI providers for resume optimization and natural language processing.
• With payment processors, hosting providers, analytics services, customer support tools, and email service providers under contracts that protect your data.
• For legal compliance, protection of rights, safety, and fraud prevention.
• During business transfers, mergers, or acquisitions.
• With your explicit consent.

International Transfers

CVagent is operated by Taqanu OU in Estonia. Data may be transferred internationally only to GDPR-compliant providers using Standard Contractual Clauses approved by the European Commission or similar mechanisms.

Your GDPR Rights

EU residents have rights to:

• Access and obtain copies of personal data.
• Correct inaccuracies.
• Request data deletion.
• Restrict or object to data processing.
• Request data portability.
• Withdraw consent at any time.
• Lodge complaints with supervisory authorities (Estonian Data Protection Inspectorate - Andmekaitse Inspektsioon).

Contact us at cvagent@taqanu.com to exercise these rights. Verification of identity may be required.

Data Security

We implement encryption (both at rest and in transit), strict access controls, regular security assessments, employee training, and data minimization to protect personal data. In case of data breaches, we adhere to applicable legal notification requirements.

Data Retention

Personal data is retained based on the following criteria:

• Account and transaction data: As long as your account is active and for a defined period thereafter for legal/auditing purposes.
• Resume data: Retained for a specified duration after last activity or until deletion is requested.
• Log and usage data: Retained for a specified period for analytics and security, then anonymized or deleted.

Cookies and Analytics

We use cookies and analytics tools like Google Analytics for enhancing service delivery and targeted advertising. Explicit consent for non-essential cookies is managed through a cookie banner and preference center. More details are provided in our Cookie Policy.

Children's Privacy

Our services are not directed at individuals under 16, and we do not knowingly collect personal data from them. We will promptly delete such data upon discovery.

Changes to this Policy

We will notify users of material changes via our website, email, or in-app notifications. Historical versions of this policy can be made available upon request.

Contact Information

For questions or to exercise your rights, contact:

If applicable, our Data Protection Officer (DPO) can also be contacted at the above email.

Definitions and Additional Information

• Personal Data: Information identifying or relating to an identifiable person.
• Processing: Operations performed on personal data, including collection, storage, and analysis.
• Data Controller: Taqanu OU, determining the purposes and means of data processing.

This policy reflects our commitment to transparency, compliance, and protecting your personal data. For specific legal advice tailored to your circumstances, please consult a qualified privacy professional.