Privacy & POPIA notice

1. What we collect

• Account information: your name, email address and password (stored hashed), or your Google account identity if you sign in with Google.
• CV content you upload: your work history, education, contact details and anything else in the document or text you supply.
• Job adverts you paste in for tailoring.
• Generated documents and their ATS scores, saved to your account.
• Billing records: your plan, status and billing dates. Card details are handled by our payment processor and are never stored by us.
• Usage counts and feedback: how many documents you generated on a given day (to apply fair-use limits) and any thumbs up/down rating or comment you leave on a generated document.
• Technical logs needed to keep the service secure and working.

Please do not upload your ID number, banking details, medical information or other special personal information. A CV does not need it and we do not want it.

2. Why we process it and on what basis

We process your information to perform our contract with you (producing the documents you paid for), to comply with legal obligations such as tax records, and for our legitimate interest in keeping the service secure. Where consent is required, you give it when you accept this notice at sign-up, and you may withdraw it at any time.

3. Who we share it with

• Our AI provider, which processes the text of your CV and job advert in order to generate your documents. Your content is sent for that purpose only.
• Our hosting and database provider, which stores your account and documents.
• Our payment processor, which handles your card and subscription.
• Authorities, where we are legally required to disclose information.

We never sell your personal information and we do not share your CV with recruiters or employers.

4. Cross-border transfers

Some of these providers process data outside South Africa. Section 72 of POPIA permits this where the recipient is bound by rules providing an adequate level of protection. We rely on our providers' contractual data protection commitments for these transfers.

5. How long we keep it

Documents stay in your account until you delete them or close your account. If you close your account we delete your documents and profile within 30 days, except records we must keep for tax and accounting purposes, which we retain for five years as required by law.

6. Your rights

Under POPIA you may:

• ask what personal information we hold about you and request a copy;
• ask us to correct or delete information that is wrong or no longer needed;
• object to processing, or withdraw consent where we rely on it;
• lodge a complaint with the Information Regulator (South Africa) at inforeg@justice.gov.za.

You can delete all your saved documents, or close your account entirely and erase your profile, documents, usage records and login, from your account page. For anything else, email sahilkalicharan@gmail.com and we will respond within 30 days.

7. Security and breaches

We use encrypted connections, row-level database access controls and access restricted to your own account. No system is perfectly secure. If a breach affects your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA.

8. Cookies and consent

We use two categories of cookies and local storage. Strictly necessary items keep you signed in, keep your session secure and remember your cookie choice — these are required for the service to work and cannot be switched off. Optional analytics items help us measure which parts of the service are used, and are only set if you agree.

When you first visit, a banner asks you to accept all cookies, allow only the necessary ones, or manage each category. Nothing optional is set before you choose. You can change your decision at any time using the "Cookie preferences" link in the footer. We do not run advertising trackers and we do not sell your information.

8a. Deletion confirmation receipts

Whenever you delete a document, delete all your documents, or close your account, we show you a deletion confirmation receipt with a unique reference, the date and time, the account concerned and a list of exactly what was erased. You can download that receipt as a text file and keep it as proof of your POPIA request. Deletions are permanent and cannot be reversed.

9. Contact

Information Officer, Kwenta CV
1226 Park Street
sahilkalicharan@gmail.com