Privacy Policy
As AcceptCV (“Platform” or “Data Controller”), we process your personal data in accordance with the Turkish Personal Data Protection Law (KVKK, No. 6698) and related legislation. This text has been prepared to explain what data we process, how and why, and your rights under KVKK.
[DEĞİŞTİR: İşletme adı / Ad-Soyad ve T.C. Kimlik No veya Vergi No]
1. Data Controller
Your personal data is processed by [DEĞİŞTİR: İşletme adı / Ad-Soyad ve T.C. Kimlik No veya Vergi No] as the data controller. You may send your requests to [DEĞİŞTİR: destek@cvbuilder.com].
2. Personal Data Processed
The following personal data is processed in order to provide the Service:
- Identity and contact: Name-surname, email address (if you sign in with Google, this information is obtained from Google).
- Account security: Your password (stored one-way encrypted/hashed).
- CV content: All information you enter into your resume (education, experience, skills, etc.) and the profile photo you upload.
- Publication info: The CV content you share via a public link.
- Payment: Transaction information related to the Premium membership payment (card details are processed by the payment provider and are not stored by us).
- Technical data: IP address, browser/device information, session and usage logs.
3. Purposes and Legal Bases of Processing
Your personal data is processed for the following purposes within the scope of KVKK Article 5:
- Provision of the Service (performance of the contract): Creating your account, storing/editing your CV, generating PDFs and publishing.
- Legal obligations: Fulfilling tax, accounting and legal record-keeping obligations.
- Legitimate interest: Ensuring Service security, preventing fraud, improving the Service and resolving technical issues.
- Explicit consent / use: Processing relevant data in a KVKK-compliant manner for AI text generation and analysis.
4. Parties to Whom Data Is Transferred
Your data may be shared with the following service providers in order to achieve the purposes listed above:
- Database and authentication: Supabase (session and data storage).
- Sign-in provider: Google (Google sign-in).
- Artificial intelligence: Google Gemini (for text generation).
- Payment: [EDIT: payment service provider name].
- Analytics/infrastructure: Hosting and analytics services used to operate the Service.
Your personal data is shared with these service providers subject to their privacy and security standards, only for the purpose of providing the Service.
5. Transfer of Data Abroad
Important: The servers of the service providers listed above may be located abroad (outside Türkiye). Accordingly, your personal data may be transferred abroad within the scope of KVKK Article 9. Such transfers are carried out in compliance with KVKK and related regulations.
6. Data Retention Period
Your personal data is retained for as long as necessary to provide the Service and for the retention periods stipulated by relevant legislation (e.g. tax/commercial books). If you delete your account, your data is deleted or anonymized upon your request, except for data that must be retained under legal obligations.
7. Cookies
The Platform uses cookies and similar technologies for session management and basic usage. You can manage cookies through your browser settings; however, some features of the Service may not work when certain cookies are disabled.
8. Data Security
We take appropriate technical and administrative measures to protect your personal data against unauthorized access, disclosure or alteration. Card details are not stored by us; this data is processed solely by the payment service provider.
9. Your Rights Under KVKK (Article 11)
Within the scope of KVKK Article 11, you have the following rights:
- To learn whether your personal data is being processed,
- To request information if it has been processed,
- To learn the purpose of processing and whether it is used in line with that purpose,
- To request correction if it is processed incompletely or inaccurately,
- To request its deletion or destruction,
- To request that third parties to whom it was transferred be informed,
- To object to a result arising to your detriment from the analysis of the processed data exclusively through automated systems,
- To demand compensation for damages if you suffer harm due to unlawful processing.
To exercise these rights you may apply to [DEĞİŞTİR: destek@cvbuilder.com]. Your requests are evaluated and concluded within the time limits set out in KVKK.
10. Contact
For any questions regarding our privacy practices or your personal data: [DEĞİŞTİR: destek@cvbuilder.com]