Privacy Policy

This Privacy Policy explains how LOGIA RETAIL (“we”), the Data Fiduciary for CVwiz (cvwiz.in), collects, uses, and protects your personal data, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable law. Résumé data is personal-data-dense, and we treat it with care.

1. Data We Collect

• Account data: your name, email address, and a securely hashed password (we never store your password in readable form). If you sign in with Google, we receive basic profile information from Google.
• Résumé and document content: everything you enter to build your documents — which may include your phone number, address, employment and education history, skills, links, and an optional photo.
• Billing data: your chosen plan, subscription status, the state you select for tax purposes, and invoice records. Payments are processed by Razorpay; we do not receive or store your full card details.
• Technical and usage data: limited information needed to operate and secure the Service, such as session information and error logs.

2. How We Use Your Data

We use your data only for the following purposes:

• to provide the Service — storing, displaying, and rendering your documents;
• to process payments, manage subscriptions, and issue GST invoices;
• to provide support and respond to your requests;
• to secure the Service and prevent abuse;
• to comply with legal and tax obligations.

We limit our use of your data to these purposes (purpose limitation) and do not use your résumé content for advertising. We do not sell your personal data.

3. Consent

We process your personal data based on the consent you give when you create an account and use the Service, and for the purposes described above. You may withdraw consent at any time by deleting your account (Section 8); withdrawal does not affect processing already carried out.

4. Service Providers (Data Processors)

We share data only with service providers who process it on our behalf to run the Service, under appropriate contractual protections. Currently:

• Neon — database hosting (data stored in Singapore).
• Vercel — web application hosting (United States).
• Render — server-side PDF generation (Singapore).
• Razorpay — payment processing (India).

As we add features we may engage further processors — for example, transactional email, error monitoring, product analytics, and AI providers — and will update this Policy accordingly.

5. AI Features

When you use AI-assisted writing features (where available), the specific text you ask us to work on is sent to our AI provider to generate a response. We use providers under terms that do not train their models on your content, and we minimise what we send (for example, we do not send your contact details for a writing suggestion). AI output is a suggestion you choose whether to use.

6. Cross-Border Transfers

Some providers listed above process data outside India. Where we transfer personal data across borders, we do so in accordance with applicable law and rely on the contractual protections offered by those providers.

7. Data Retention

• Résumé and account data: retained while your account is active. When you delete your account, this data is deleted (see Section 8).
• Invoices and tax records: retained for the period required by Indian tax law (up to approximately 8 years), even after account deletion, as required to meet our legal obligations.
• Backups: deleted data ages out of routine encrypted backups within the backup retention window.

8. Your Rights

Under the DPDP Act you have the right to:

• Access and export your data — download a copy from Settings, or ask us;
• Correct your data — the Service is an editor, so you can update your content directly at any time;
• Erase your data — delete your account from Settings, which removes your profile, sessions, and documents (subject to the tax retention above);
• Grievance redressal — raise a concern with our Grievance Officer (Section 11);
• Nominate another individual to exercise your rights in the event of death or incapacity — contact us to do so.

9. Security

We protect your data with encryption in transit (HTTPS), password hashing, access controls that scope every request to its owner, and image re-encoding that strips embedded metadata (such as GPS location) from uploaded photos. No system is perfectly secure, but we work to safeguard your information and to detect and address issues.

10. Cookies

We use a strictly necessary cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies. If we introduce optional analytics in future, we will do so in a privacy-respecting way and update this Policy.

11. Grievance Officer

In accordance with the DPDP Act, you may contact our Grievance Officer for any concern about your personal data:

Deep Sutaria, Grievance Officer
LOGIA RETAIL, 101 Bhanu, Jangid Estate, Near Vasundhara, Mira Road East, Dist Thane 401107, Maharashtra, India
Email: grievance@cvwiz.in

We aim to acknowledge grievances promptly and to respond within the timelines required by applicable law.

12. Data Breach

In the event of a personal data breach, we will take steps to contain and remedy it and will notify the Data Protection Board of India and affected users as required by the DPDP Act.

13. Children

The Service is not directed to children under 18. We do not knowingly process the personal data of a child without verifiable parental consent as required by the DPDP Act.

14. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified by reasonable means. The “Last updated” date at the top reflects the current version.

15. Contact

Privacy questions: privacy@cvwiz.in. LOGIA RETAIL, 101 Bhanu, Jangid Estate, Near Vasundhara, Mira Road East, Dist Thane 401107, Maharashtra, India.