CvCy Talent Privacy Policy

1. Who we are

CvCy Talent is published by Y Studio, a company based in Dakar, Senegal. For any question about this policy, you can contact us at contact@cvcy.app.

CvCy Talent acts as data controller for all personal data processed through the platform.

2. Data we collect

We may collect the following categories of data:

• Account data: first name, last name, email, encrypted password
• Professional data you provide us: resume, cover letter, experience, education, skills, portfolio
• Usage data: offers viewed, tracked applications, interview simulation answers and related AI feedback
• Browsing data: IP address, device type, pages visited, technical and analytics cookies
• Billing data: information required to process paid-plan payments, handled by our payment provider

3. Why we use your data

Your data is used for the following purposes:

• Providing and improving the service: resume creation and tailoring, cover letter generation, job search, application tracking, interview simulation, portfolio
• Enabling AI-based improvement and tailoring of your content, based on the information you provide
• Ensuring platform security and preventing fraud
• Communicating with you about your account or subscription
• Complying with our legal and regulatory obligations
• Producing anonymized statistics to improve our algorithms

4. Legal basis for processing

Depending on the case, the processing of your data is based on: performance of the contract binding us to you, your consent (in particular for certain cookies), our legitimate interest in improving and securing our service, or compliance with a legal obligation.

5. Data sharing

We never sell your personal data. It may be shared with:

• Our technical sub-processors: Supabase (database hosting, EU), Vercel (application hosting, EU) and our AI model providers (content generation and tailoring, governed by a GDPR-compliant data processing agreement)
• The recruiter or company you choose to send your resume, cover letter, or portfolio link to
• Competent authorities, when required by law

6. International transfers

Your data is hosted within the European Union. Since CvCy Talent is established in Senegal, access to this data by our teams may constitute an international transfer under the GDPR.

These transfers are governed by the Standard Contractual Clauses adopted by the European Commission. Senegalese Law No. 2008-12 on the protection of personal data provides an adequate level of protection.

7. Retention period

• Active account data: retained for as long as your account exists
• After account deletion: retained for 30 days to allow you to reconsider, then permanently deleted unless otherwise required by law
• Connection logs: retained for 12 months for security purposes
• Billing data: retained for 10 years in accordance with accounting obligations, for paid-plan users

8. Security

We implement technical and organizational measures to protect your data:

• Encryption of data at rest (AES-256) and in transit (TLS 1.2+)
• Role-based access control and least-privilege principle
• Automatic daily backups
• Continuous monitoring and alerts for abnormal activity
• Hosting with ISO 27001 / SOC 2 certified providers

9. Your rights

In accordance with the GDPR and, where applicable, Senegalese data protection law, you have the following rights over your data: access, rectification, erasure, restriction of processing, portability, and objection.

These rights are exercised directly with us at contact@cvcy.app.

You also have the right to lodge a complaint with the competent data protection authority (for example the CNIL in France, or the Data Protection Commission in Senegal).

10. AI-generated content

CvCy Talent offers features to improve and tailor your resume, cover letter, and interview answers using AI. These features rephrase the content you provide, without ever inventing numbers, companies, or experience you did not provide.

You remain solely responsible for the accuracy of the information on your documents before sending them to a recruiter.

11. Cookies

Our site uses technical cookies necessary for the service to function, as well as analytics cookies to measure traffic and improve our platform. You can manage your cookie preferences at any time from your browser settings.

12. Changes to this policy

We may modify this privacy policy at any time. Any substantial change will be communicated to you by email or in-app notification at least 30 days before it takes effect.

13. Contact

For any question about this policy or to exercise your rights, contact us at contact@cvcy.app.