Privacy Policy

Last updated: [DATE] · Draft pending legal review

Plain-language summary: You upload your CV and tell us what jobs you want. We use that information for one purpose — finding matching jobs and preparing tailored applications for you. We only send your application to an employer when you tell us to. We never sell your information.

1. Who we are

SharpCV ("SharpCV", "we", "us") is an online career services platform operated by [FULL LEGAL NAME / ENTITY, Registration No. if applicable], based in Cape Town, South Africa. We are the "responsible party" for your personal information under the Protection of Personal Information Act, 4 of 2013 ("POPIA").

Information Officer: [NAME] — privacy@sharpcv.co.za

2. What we collect

Information you give us: your name, email address, the contents of your CV, your job preferences (target roles, industry, location, expected salary), and optionally your WhatsApp number.
Information we create: a structured profile derived from your CV using artificial intelligence, tailored CVs and cover letters prepared for specific job listings, and records of applications you instruct us to prepare or submit.
Technical information: basic usage and device information needed to operate and secure the service.

3. Why we process it (purpose)

We process your personal information only to:

build your candidate profile from your CV;
find job listings that match your stated preferences;
prepare tailored CVs and cover letters for those listings;
submit applications to employers or job platforms when you instruct or approve this;
communicate with you about your matches, previews, applications and account (by email and, if you provided a number, WhatsApp);
process payments and manage credits;
comply with the law.

We do not sell your personal information, and we do not use it for third-party advertising.

4. Consent and your control

We process your information on the basis of the consent you give when you upload your CV and tick the consent box, and on the basis of performing the service you have asked for. By default, no application is sent to any employer without your approval of that specific application. If we later offer an automatic-application option, it will require your separate, explicit opt-in and can be switched off at any time.

You may withdraw consent at any time by emailing us; this will stop further processing but will not affect applications already sent at your instruction.

5. Who we share it with

Employers and job platforms: when you approve an application, we share your tailored CV, cover letter and contact details with the relevant employer or platform — that is the point of the service.
Service providers (operators): we use trusted providers to run SharpCV, including cloud database hosting (Supabase), AI processing (Anthropic), workflow automation (n8n), email delivery, and South African payment processors. They process your information only on our instructions.
Legal: where disclosure is required by law.

6. Cross-border transfers

Some of our service providers store or process information on servers outside South Africa (including in the European Union and the United States). We only use providers who are subject to laws or binding agreements that provide substantially similar protection to POPIA, as permitted by section 72 of POPIA.

7. How long we keep it

We keep your profile and application history while your account is active. If you ask us to delete your information, or your account is inactive for [24] months, we delete or de-identify your personal information, except records we must keep by law (for example, payment records).

8. Security

We take reasonable, appropriate technical and organisational measures to protect your information, including encryption in transit, access controls and database-level security restrictions. No system is perfectly secure; if a data breach affecting you occurs, we will notify you and the Information Regulator as required by POPIA.

9. Your rights

Under POPIA you have the right to:

ask what personal information we hold about you and receive a copy;
ask us to correct or delete it;
object to processing or withdraw consent;
complain to the Information Regulator (South Africa): inforegulator.org.za · complaints.IR@inforegulator.org.za.

To exercise any of these rights, email privacy@sharpcv.co.za. We respond within a reasonable time and at most within the periods POPIA allows.

10. Age

SharpCV is intended for users aged 18 and over. We do not knowingly process the personal information of children. If you believe a child's information has been provided to us, contact us and we will delete it.

11. Changes

We may update this policy from time to time. Material changes will be posted on this page with a new "last updated" date, and where appropriate we will notify you by email.