Privacy Policy

1. Who we are

(registration number ), trading as Send My CV, is a Responsible Party as defined in the Protection of Personal Information Act 4 of 2013 ("POPIA"). We operate a free WhatsApp-based CV-building service available to residents of South Africa.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have under South African law.

2. Information we collect

2.1 Information you give us directly

• Identity information: your full name
• Contact information: your WhatsApp phone number; your email address (optional)
• Location information: city or town of residence
• Education history: qualification level, field of study, institution name
• Employment history: job titles, employer names, employment cities, dates, duties, and achievements (up to three roles)
• Skills: professional and personal skills you select or describe
• Languages: languages you speak and your proficiency level in each
• Profile statement: a short personal description you write or that we generate with your approval
• Availability: when you can start a new job
• Interview Practice answers (optional): if you use the Interview Practice feature, the English text transcript of each voice-note answer. We use the voice note only to create the transcript and do not store the audio recording — it is discarded once transcribed

2.2 Special personal information (optional)

With your explicit consent, and only if you choose to share it, we may collect:

• Race and gender for Employment Equity reporting on your CV
• Right-to-work status (e.g. South African citizen, permanent resident, work permit holder)

These fields are entirely optional. You may skip them at any time and they will not appear on your CV if you do not provide them.

2.3 Information collected automatically

• Message timestamps and conversation state, used to manage your session and send reminder messages if you stop partway through
• Feedback you voluntarily submit about the service
• Contact form submissions sent via our website
• Job listing interactions: when you tap a job listing link in the JOBS feature, we record which listing you tapped and when, linked to your WhatsApp number, to measure interest and improve which jobs we show you
• Interview Practice analytics (only if you consent): if you consent to your practice answers being stored, we also keep derived, pseudonymous metrics about each answer — for example a quality score, structure and readiness ratings, the spoken language, and a word count. These are linked to an internal identifier only, not to your name or phone number, and contain no raw answer text

2.4 Website analytics (with your consent)

If you accept analytics cookies, we use Microsoft Clarity to collect anonymised data about how visitors interact with our website — including mouse movements, clicks, scroll depth, and page views. This data is used only to improve the website experience. It does not contain your CV content, name, phone number, or any other personal information you provided via WhatsApp. You can withdraw your consent at any time by clearing your browser cookies.

3. How we collect your information

We collect information:

• Directly from you, through conversation on WhatsApp
• Through our website contact form at sendmycv.co.za/contact
• Through analytics cookies on our website, only if you give your explicit consent (see section 11)

We do not use tracking pixels or behavioural advertising.

4. Why we use your information

We process your personal information for the following purposes:

• CV generation: to build, format, and deliver your professional CV as a PDF via WhatsApp — the primary purpose of the service
• Session management: to save your progress so you can continue later and to allow you to update your CV
• Reminders: to send you a single follow-up WhatsApp message if you start but do not complete your CV within 23 hours
• Job listings and matching: if you use the JOBS feature and give the separate consent we request beforehand, we use your location, the kind of work you are looking for, and relevant details from your CV (such as your driver's licence and work experience) to show you suitable job opportunities from third-party employers, ranked by how close they are to you, and we record which listings you tap to improve future matches. We do not share your personal information with these employers — you apply to them directly.
• Interview Practice: if you use this optional feature, we transcribe your voice notes into English and analyse them with AI to give you practice feedback. We do not store the audio recording — it is discarded once transcribed. We store the text transcript only if you give the separate consent we request beforehand; where you consent, the transcript and the derived metrics are kept pseudonymously to show you progress and to produce anonymised, aggregated insights. You can withdraw this consent at any time from the Interview Practice menu, which stops further storage and deletes the transcripts and metrics we have stored for you. If you do not consent, your transcribed answer is used only for your immediate feedback and is not retained.
• Service improvement: we analyse aggregated, anonymised data (e.g. common skills across South Africa) to improve the service. No individual is identifiable in this analysis.
• Customer support: to respond to enquiries submitted via our contact form
• Legal compliance: to comply with applicable South African laws

If you opted in, we may also send you WhatsApp messages about new services we launch. You can opt out at any time by sending RESTART to our WhatsApp number and choosing to start fresh, or by contacting us directly.

5. Who we share your information with

We do not sell your personal information. We share it only with the following Operators who process data on our behalf, under written data processing agreements:

• Supabase Inc. (database and file storage) — your CV data and session information is stored on Supabase servers. Data is encrypted at rest and in transit. Supabase may host data in data centres outside South Africa.
• Meta Platforms Ireland Limited (WhatsApp Cloud API) — all messages you send and receive pass through Meta's WhatsApp Business Platform. Meta's own privacy policy applies to WhatsApp messaging.
• Google LLC (Gemini AI) — your CV content (work history, skills, profile statement) is sent to Google's Gemini API solely to improve the quality of your CV text. If you use the Interview Practice feature, your voice notes are also sent to Gemini to be transcribed, translated into English, and analysed so we can give you feedback. Google does not use this data to train its models under our API agreement.
• Groq Inc. — used for real-time text processing (e.g. spelling correction of job titles) and, in the Interview Practice feature, to transcribe and translate your voice notes into English (using a speech-to-text model). Groq does not retain your data beyond the processing request.
• Microsoft Corporation (Clarity analytics) — if you accept analytics cookies, anonymised website interaction data (mouse movements, clicks, page views) is shared with Microsoft Clarity. No CV content or personal information from WhatsApp is included. Microsoft's privacy policy governs their handling of this data.

We may also disclose your information if required to do so by law or by a competent South African court or authority.

6. International transfers

Some of our Operators (listed above) process data outside South Africa. Where this occurs, we take steps to ensure that adequate protection is in place, including contractual safeguards consistent with POPIA section 72. By using our service, you acknowledge that your information may be transferred to and processed in countries outside South Africa.

7. How long we keep your information

• CV data and session records: retained for years from your last interaction, or until you request deletion via the RESTART command
• Inactive accounts (no messages for more than months) are automatically deleted
• Special personal information (race, gender, right-to-work): deleted together with your session record
• Interview Practice transcripts and metrics (stored only if you consent; the audio is never stored): kept while you remain opted in, and deleted as soon as you opt out from the Interview Practice menu or send RESTART; otherwise deleted together with your session record
• Feedback submissions: retained for years
• Contact form submissions: retained for years

You can delete your data at any time by sending RESTART to our WhatsApp number. This permanently erases your name, contact details, CV content, and session history.

8. Your rights under POPIA

As a data subject under POPIA, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request that inaccurate or incomplete information be corrected (you can also do this directly by sending EDIT via WhatsApp)
• Deletion: request that your personal information be deleted (send RESTART on WhatsApp for immediate deletion)
• Objection: object to the processing of your personal information on reasonable grounds
• Withdraw consent: withdraw your consent to processing at any time, without affecting the lawfulness of processing carried out before withdrawal
• Lodge a complaint: complain to the Information Regulator if you believe your rights have been violated (see section 12)

To exercise any of the above rights, contact our Information Officer using the details in section 13.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or destruction. These include:

• Encryption of data in transit (TLS) and at rest
• Role-based access controls limiting who can access your data
• Separation of sensitive attributes (race, gender, right-to-work status) into a separate database table with restricted access
• Use of service-role API keys that are never exposed to end users

No system is completely secure. If you become aware of a security concern, please contact us immediately at .

10. Children

Our service is intended for persons aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe a child has submitted information to us, please contact us and we will delete it promptly.

11. Cookies and analytics

We use one analytics cookie on our website — Microsoft Clarity — and only with your explicit consent. When you first visit our website, a banner gives you the choice to Accept or Decline this cookie.

• If you accept: the Clarity cookie is set and anonymised usage data (mouse movements, clicks, scroll depth, page views) is collected to help us improve the website. No CV content or personal information from your WhatsApp session is ever included.
• If you decline: no analytics cookie is set and no data is sent to Microsoft Clarity.

Your preference is stored in your browser's local storage. You can withdraw consent at any time by clearing your browser's cookies and local storage, then declining when the banner reappears.

We do not use advertising cookies, tracking pixels, or any form of behavioural advertising.

12. Changes to this policy

We may update this Privacy Policy from time to time. The version number and effective date at the top of this page will reflect any changes. We will notify active users of material changes via WhatsApp before they take effect.

13. How to complain

If you are not satisfied with how we handle your personal information, you may lodge a complaint with the Information Regulator:

We encourage you to contact us first so that we can attempt to resolve your concern directly before escalating to the Regulator.

14. Contact us

For any privacy-related queries, requests, or complaints, contact our Information Officer: