Privacy Policy

cvLay ('we', 'our', or 'us') is committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using cvLay, you consent to the data practices described in this policy.

We encourage you to read this policy carefully and contact us if you have any questions.

Personal Information: Name, email address, phone number, professional experience, education, and skills.

Profile Data: Resume content, work history, certifications, portfolio items, and career preferences.

Usage Data: How you interact with our platform, pages visited, time spent, and feature usage.

Device Information: IP address, browser type, operating system, and device identifiers.

Communication Data: Messages sent through our platform and correspondence with our support team.

Direct Collection: Information you provide when creating an account, uploading resumes, or updating your profile.

Automatic Collection: Data collected through cookies, analytics tools, and tracking technologies.

Third-Party Sources: Information from social media profiles, professional networks, and integrated services.

Public Sources: Publicly available professional information that you've made accessible online.

Referrals: Information provided by other users who refer you to our platform.

Platform Services: To provide job matching, resume building, and career development tools.

Communication: To send notifications, updates, and respond to your inquiries.

Personalization: To customize your experience and improve our recommendations.

Analytics: To analyze usage patterns and improve our services.

Legal Compliance: To comply with applicable laws and protect our rights and interests.

Employers: With your consent, we share your profile information with potential employers.

Service Providers: With trusted third-party vendors who assist in providing our services.

Legal Requirements: When required by law, court order, or to protect our rights.

Business Transfers: In connection with mergers, acquisitions, or asset sales.

Aggregated Data: Non-personally identifiable data for research and analytics purposes.

Encryption: We use industry-standard encryption to protect data in transit and at rest.

Access Controls: Strict access controls ensure only authorized personnel can access your data.

Regular Audits: We conduct regular security audits and vulnerability assessments.

Incident Response: We have procedures in place to respond to security incidents promptly.

Employee Training: Our staff receives regular training on data protection and privacy practices.

Access: You can request access to the personal information we hold about you.

Correction: You can update or correct inaccurate information in your profile.

Deletion: You can request deletion of your account and associated data.

Portability: You can request a copy of your data in a portable format.

Opt-out: You can opt out of certain communications and data processing activities.

Essential Cookies: Required for basic platform functionality and security.

Analytics Cookies: Help us understand how users interact with our platform.

Preference Cookies: Remember your settings and preferences.

Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.

Cookie Management: You can control cookie settings through your browser preferences.

Integration Partners: We may integrate with third-party services like LinkedIn or Google.

External Links: Our platform may contain links to external websites with their own privacy policies.

Social Media: Features that enable sharing on social media platforms.

Analytics Providers: Third-party analytics services to understand platform usage.

No Control: We are not responsible for the privacy practices of third-party services.

Active Accounts: We retain your data as long as your account remains active.

Inactive Accounts: Data may be retained for a reasonable period after account deactivation.

Legal Requirements: Some data may be retained longer to comply with legal obligations.

Deletion Requests: We will delete your data upon request, subject to legal requirements.

Backup Systems: Data in backup systems may take additional time to be fully removed.

Global Operations: We may transfer data to countries where we or our service providers operate.

Adequate Protection: We ensure appropriate safeguards are in place for international transfers.

Standard Contractual Clauses: We use legally approved mechanisms for data transfers.

Data Processing Agreements: Our service providers are bound by strict data protection agreements.

User Consent: By using our platform, you consent to these international transfers.

Age Restriction: Our services are not intended for children under 16 years of age.

No Knowingly Collection: We do not knowingly collect personal information from children.

Parental Notice: If we discover we have collected data from a child, we will delete it promptly.

Verification: We may require age verification for certain features.

Parental Rights: Parents can contact us to review or delete their child's information.

Regular Review: We review and update this policy periodically to reflect changes in our practices.

Notification: We will notify users of material changes via email or platform notification.

Effective Date: Changes take effect on the date specified in the updated policy.

Continued Use: Your continued use of the platform constitutes acceptance of the updated policy.

Version History: Previous versions of this policy are available upon request.