Privacy Policy
We respect your privacy and are committed to POPIA compliance. Last updated: 24 July 2026.
1. Introduction
CV Hub ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa.
This Privacy Policy explains how we collect, use, store and protect your personal information when you use our platform at https://cvhub.co.za.
By registering and using CV Hub, you consent to the processing of your personal information as described in this policy.
2. Information We Collect
Information you provide:
- Account information: username, email, contact number, password (stored hashed)
- Profile information: name, photo, date of birth, address, education, work history, skills
- Cover letters and professional summaries
- Messages sent through the platform
- Messages you send to Mandy, our AI CV assistant, and any CV document you upload to be imported
Information collected automatically:
- IP addresses for security and fraud prevention
- Browser type and device information
- Usage data (pages visited, time spent)
- Profile views and CV download statistics
Information from social sign-in (Google / Facebook):
- If you choose to register or log in with Google or Facebook, we receive your name, email address and profile picture from that provider
- We never receive or store your Google or Facebook password, and we never post to your social accounts
- The connection is used solely to authenticate you; you can also set a CV Hub password at any time via "Forgot password"
3. How We Use Information
We use your information to:
- Create and manage your account
- Display your CV profile to employers (when you enable visibility)
- Send transactional emails (verification, password resets, notifications)
- Improve our platform and services
- Detect and prevent fraud and abuse
- Comply with legal obligations
We will never sell your personal information to third parties.
4. AI Features
CV Hub offers a number of optional AI-assisted features. Every one of them is started by you - nothing is sent to an AI service unless you click the button or send the message. You can use CV Hub in full without ever using them.
What each feature sends:
- Mandy, our CV assistant: the messages you type, plus a short summary of your profile status - your first name, how complete your CV is, whether it is public, and which sections are still empty.
- AI writing help (About Me and cover letter): the profile details needed to write the draft, such as your qualifications, work experience and skills, together with any text you have already written.
- Professional photo enhancement: the profile photo you uploaded, which is a photograph of your face.
- CV import: the contents of the CV document you upload.
Who processes it: we use Anthropic PBC (Mandy) and OpenAI, L.L.C. (writing help, photo enhancement and CV import). Both are based in the United States, so using these features involves a transfer of your personal information outside South Africa. We rely on section 72 of POPIA: the transfer is necessary to perform the service you have asked us for, and these providers are bound by contractual terms requiring an adequate level of protection. If you would prefer your information not to leave South Africa, simply do not use these features.
How your information is used and kept:
- We use business API accounts under terms where your content is not used to train the providers' AI models.
- Your conversation with Mandy is held only in your browsing session. It is never written to our database and is discarded when you log out or your session ends.
- AI-generated text and photos are saved to your profile only if you choose to save them.
- Our providers may retain content for a limited period for abuse monitoring, in line with their own policies.
Photographs of your face: photo enhancement processes an image of your face. You start it deliberately, you see the original and the enhanced version side by side, and nothing replaces your photo until you accept it. We do not use your photo for facial recognition, identification, or any purpose other than producing the enhanced image you asked for.
No automated decisions about you: these features exist only to help you write and present your own CV. No AI system screens, ranks, scores or decides anything about you, and employers see only what you have chosen to publish.
6. Profile Visibility
You have complete control over your profile visibility:
- Private (hidden): Your profile is not visible to anyone except yourself. This is the default setting.
- Public: Your profile appears in the CV database and can be viewed by employers. Your email and phone number are partially redacted for privacy.
You can toggle your visibility at any time from your Dashboard.
7. Data Retention
We retain your personal information for as long as your account is active. If you close your account:
- Your profile is immediately deactivated and removed from public view
- Your data is retained for 12 months to allow account recovery
- After 12 months, your data is permanently deleted
Conversations with Mandy are not retained at all - see section 4.
You may request immediate data deletion by contacting us.
8. Your POPIA Rights
Under POPIA, you have the right to:
- Access: Request a copy of your personal information we hold
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Object: Object to processing of your information
- Withdraw consent: Withdraw consent at any time
- Complain: Lodge a complaint with the Information Regulator of South Africa
To exercise these rights, contact our Information Officer at privacy@cvhub.co.za.
The Information Regulator of South Africa can be reached at: inforegulator.org.za
9. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- Passwords hashed using bcrypt (never stored in plaintext)
- HTTPS encryption for all data in transit
- Regular security reviews and updates
- Rate limiting on authentication endpoints
- CSRF protection on all forms
No method of electronic storage or transmission is 100% secure. We strive to use commercially acceptable means to protect your information.
11. Children's Privacy
CV Hub is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Continued use of CV Hub after changes constitutes acceptance of the updated policy.
13. Contact & Complaints
For privacy-related questions or to exercise your POPIA rights, contact our Information Officer:
- Email: privacy@cvhub.co.za
- Contact form: cvhub.co.za/contact
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:
- Website: inforegulator.org.za
- Email: inforeg@justice.gov.za