Privacy & Data Protection Policy

1. Introduction

10xCV ("we", "us", "our") is committed to protecting your privacy. This Privacy & Data Protection Policy describes how we collect, use, store, and disclose your personal data when you use our service, and the choices you have. We act as the data controller for the personal data processed through the Service.

2. Data we collect

We collect the following categories of data:

• Account data: your name, email address, and authentication credentials.
• Profile and CV content: your professional experience, skills, education, and any documents or text you upload.
• Job application data: the job postings you submit and the tailored outputs generated for you.
• Payment data: billing details processed securely by our third-party payment provider; we do not store full card numbers.
• Usage and device data: log data, IP address, browser type, and interactions with the Service, collected automatically.

3. How we use your data

We process your personal data to:

• Provide, operate, and maintain the Service, including generating tailored CVs.
• Create and manage your account and process your subscription payments.
• Improve and develop our features, models, and user experience.
• Communicate with you about updates, security alerts, and support requests.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with our legal obligations.

4. Legal bases for processing

Where applicable data protection law (such as the GDPR) applies, we rely on the following legal bases: performance of our contract with you to provide the Service; your consent where required; our legitimate interests in operating and improving the Service; and compliance with legal obligations.

5. AI processing

To deliver tailored outputs, your profile content is being processed by automated systems, then anonymised and transmitted to trusted third-party AI providers acting as our processors under appropriate contractual safeguards. We do not sell nor share your personal data to third parties outside our system, and we do not use the content of your CV to train publicly shared models without your explicit consent.

6. Sharing and disclosure

We share personal data only with service providers who help us operate the Service (hosting, payment processing), all bound by confidentiality and data-protection obligations. We may also disclose data where required by law, to enforce our terms, or in connection with a merger, acquisition, or sale of assets.

7. International transfers

Your data may be processed in countries other than your own. Where we transfer personal data across borders, we implement appropriate safeguards such as standard contractual clauses to ensure your data remains protected in accordance with this policy.

8. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account closure, we delete or anonymize your data within a reasonable period, except where we are required to retain it to comply with legal, accounting, or security obligations.

9. Data security

We implement technical and organizational measures designed to protect your data, including encryption in transit, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.

11. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling some cookies may affect functionality.

12. Children's privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If we become aware that we have collected such data, we will delete it promptly.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify you by posting the updated policy and revising the "Last updated" date above, and where required, by additional notice.

14. Contact

For any questions or requests regarding this policy or your personal data, contact our data protection team at the platform support.