Privacy Policy

• Account data: name, email address, password (stored as a salted hash), and optional Google sign-in identifier.
• Profile data candidates choose to add: education, work history, certifications, skills, salary expectations, and an optional photo. CVRepo does not host document uploads.
• Employer data: organisation details including RC number, contact person, and verification records.
• Payment records: plan, amount, and transaction reference. Card details are handled by Paystack and never touch our servers.
• Usage data: profile views, resume downloads, and messages sent through the platform inbox.

Profile data exists to be searched — but only by employers we have verified. Hidden profiles never appear in search results, and if you turn off contact visibility, employers cannot see your phone or email. We also use data to operate the service: processing payments, sending transactional email (verification codes, password resets, message notifications), and optional browser push notifications you can enable or disable per device.

• Verified employers: can find your profile in search only while your visibility is on.
• Anyone with your share link: public profile pages (/c/…) show only what your settings allow.
• CVRepo staff: limited access for support, moderation, and verification review.
• We do not sell candidate data to third parties.

We use a small set of processors to run CVRepo: Paystack (payments), Resend (transactional email), Google (optional sign-in), Firebase Cloud Messaging (optional push notifications), and Anthropic (the AI resume-writing assistant — text you submit to it is processed by Anthropic, in the United States, to generate suggestions). Each receives only the data needed for its function. Our infrastructure and database are hosted in the United States.

• Visibility: hide your profile from search, or hide contact details, at any time from Account Settings.
• Correction: edit any part of your profile whenever you like.
• Deletion: delete your account from Account Settings — this permanently removes your profile and activity.
• Notifications: email and push notification preferences are managed in Account Settings.

Under the Nigeria Data Protection Regulation (NDPR) you may also request a copy of your data or object to specific processing by contacting us.

Passwords are hashed, payment webhooks are signature-verified, and candidate search is gated behind employer verification enforced at the API level. We retain account data while your account is active and delete it when you delete your account, except records we must keep for legal or financial compliance.

We'll announce material changes to this policy in-app or by email; the date above always reflects the current version. For privacy questions or NDPR requests, contact support@cvrepo.com.