Privacy Policy

Effective date: 1 January 2025  •  Last updated: May 30, 2026

This Privacy Policy explains how SmartCV, operated by Dragonfinity Systems ("we", "us", "our"), collects, uses, stores, and protects your personal data when you use our website at smartcv.dragonfinitysystems.com. We are committed to handling your data responsibly and protecting your privacy.

1. Data We Collect

Data Type	What We Collect	Why
Account data	Email address, name, phone number	To create and manage your account and send one-time login codes
CV and document content	Work history, education, skills, profile photo, summaries, cover letters, and generated content	To provide CV building, optimization, scoring, and document generation services
Payment data	Transaction reference, amount, payment status, order identifiers	To verify payments and unlock paid features; payment credentials are handled by Selcom, not by us
Uploaded files	CV files uploaded for scoring or preview analysis	To extract text and generate analysis results
Usage and security data	IP address, browser details, timestamps, logs, rate-limit counters	To secure the platform, prevent abuse, and troubleshoot issues

2. How We Use Your Data

• Delivering the services you request, including CV generation, cover letters, scoring, and optimization
• Sending one-time login codes to your email
• Processing and verifying payments via Selcom
• Enforcing rate limits, preventing abuse, and maintaining platform security
• Improving service quality and reliability
• Responding to support enquiries

We do not sell or rent your personal data to third parties for marketing purposes.

3. AI Processing

Some features use Anthropic Claude models to generate or improve text, score CVs, and optimize application content. We send only the content necessary to perform the requested task. You are responsible for reviewing all AI-generated content before using it.

4. Data Retention

• Account and saved documents: retained while your account remains active, unless deleted by you or removed for maintenance or legal reasons
• Free CV preview checks: uploaded files are processed for analysis and are not intended to be permanently stored as user documents
• Payment records: retained as needed for accounting, audit, fraud prevention, and dispute handling
• OTP login codes: expire after a short period and are deleted or invalidated after use
• Logs: retained for operational, support, and security purposes for a limited period as reasonably necessary

5. Data Security

We use reasonable technical and organizational measures to protect your data, including:

• HTTPS/TLS encryption for website traffic
• Session-based authentication with one-time login codes
• CSRF protection on forms
• Payment verification and webhook validation controls
• Access controls and server-side validation for protected features
• Application logging for fraud detection and troubleshooting

No system can guarantee absolute security, but we work to reduce risk and protect your information.

6. Cookies and Sessions

We use essential session cookies to keep you logged in and maintain secure application state. We do not rely on advertising cookies to operate the core service.

7. Third-Party Services

Service	Purpose	Data Shared
Selcom	Payment processing	Name, email, phone number, transaction amount, and related order identifiers
Anthropic Claude	AI generation, rewriting, and scoring	Relevant CV and document text needed for the requested task
SMTP mail service	Sending OTP login codes	Your email address and login code content

8. Your Rights

You may have the right to:

• Access personal data we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data, subject to legal or operational retention requirements
• Export or copy your saved content where available
• Contact us about how your data is being used

To make a privacy-related request, contact us at support@smartcv.dragonfinitysystems.com.

9. Children's Privacy

Our Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can investigate and remove it where appropriate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

For privacy enquiries, data requests, or concerns, contact us at:
Email: support@smartcv.dragonfinitysystems.com
Website: smartcv.dragonfinitysystems.com
Operator: Dragonfinity Systems, Tanzania