Privacy Policy — Your Data & CV Files

This Privacy Policy explains how SiviGen ("we", "us", "our") collects, uses, and protects your personal data when you use SiviGen (the "Service"). We aim to collect only what we need to tailor and score your CV, and to be clear about how it's handled.

1. Data we collect

Account data

When you register, we collect your email address and an authentication credential (a hashed password). We use a session cookie to keep you signed in.

Content you provide

We process the CV text you upload and thejob descriptions you paste, along with the tailored CVs, scores, and audit results the Service generates from them.

Technical data

We may collect basic technical information (such as IP address and browser type) needed to operate the Service securely and to prevent abuse.

2. How we use your data

• To provide the core Service — parsing your CV, tailoring it to a job description, auditing claims, and scoring relevance and truthfulness.
• To authenticate you and keep your account secure.
• To operate, maintain, and improve the Service.
• To comply with legal obligations and enforce our Terms.

We do not sell your personal data, and we do not use the content of your CV to train our own or third parties' models.

3. Third-party processors

To deliver the Service, we share the minimum necessary data with trusted sub-processors:

• AI/LLM provider(s) (such as OpenAI) — relevant portions of your CV and job description are transmitted to generate and audit the tailored CV. These providers process the data to return a result and, under their applicable terms, do not use API-submitted content to train their models.
• Hosting & infrastructure providers — used to run the application and store your data securely.

We choose processors that offer appropriate data-protection commitments. A current list is available on request.

4. Legal basis

Where the GDPR or similar laws apply, we process your data to perform our contract with you (providing the Service), on the basis of your consent where required, and for our legitimate interests in operating and securing the Service.

5. Data retention

We retain your account data and content for as long as your account is active. You can delete individual applications or your entire account at any time; when you delete your account, we remove your personal data within a reasonable period, except where we must retain limited records to meet legal obligations.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these directly in the app, or by contacting us. You also have the right to lodge a complaint with your local data-protection authority.

7. Cookies

We use a strictly necessary authentication cookie to keep you signed in. We do not use advertising cookies. If we add analytics in the future, we will update this policy and, where required, ask for your consent.

8. Security

We use industry-standard measures — including encryption in transit, hashed credentials, and access controls — to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

9. International transfers

Your data may be processed in countries other than your own, including where our sub-processors operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

10. Children

The Service is not intended for children under 16, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date and, for material changes, take reasonable steps to notify you.

12. Contact

For privacy questions or to exercise your rights, contact us at[email protected].