Privacy Policy
MemorableCV — https://www.memorablecv.com
Effective date: 2 June 2025
1. Introduction and Who We Are
MemorableCV ("we", "us", "our") is an online CV and résumé builder operated as a sole proprietorship in South Africa. Our website is located at https://www.memorablecv.com.
We take your privacy seriously. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA) and related South African law.
Information Officer
In terms of POPIA, we have designated an Information Officer who is responsible for ensuring our compliance with data protection obligations.
- Email: support@memorablecv.com
If you have any privacy-related questions or concerns, please contact our Information Officer at the address above.
2. Scope and What Counts as Personal Information
This Privacy Policy applies to all personal information we process in connection with the MemorableCV website, web application, and related services (collectively, the "Service").
Under POPIA, personal information means any information relating to an identifiable, living natural person (or identifiable, existing juristic person). This includes but is not limited to:
- Names, contact details, and identification information
- Employment history, education, and professional qualifications
- Financial information
- Online identifiers such as email addresses and IP addresses
- Any other information you voluntarily provide through the Service
Because our Service is a CV builder, the personal information involved can be extensive. A CV may contain — depending on what you choose to include — sensitive categories of personal information such as health information, racial or ethnic origin, religious beliefs, and other details. You are in control of what you include in your CV. We encourage you to include only information that is appropriate and necessary for your job applications.
3. What Information We Collect
3.1 Account Information
When you create a MemorableCV account, we collect:
- Your email address
- A hashed password (authentication is managed by Supabase — see Section 6)
- Account creation date and activity timestamps
3.2 CV Content
The core content you create within MemorableCV may include:
- Full name, contact details (phone number, email, address, LinkedIn, website)
- Employment history, job titles, responsibilities, and achievements
- Educational qualifications and certifications
- Skills, interests, references, and any other sections you choose to add
- Any additional information you voluntarily include, which may include sensitive personal information
How CV content is stored is described in detail in Section 5.
3.3 Uploaded PDF Files
If you choose to upload an existing CV as a PDF file, that file is transmitted to our server where it is processed by an AI model to extract structured text and data. The uploaded PDF file is discarded immediately after parsing and is not retained on our servers. The extracted text is then handled in the same way as other CV content.
3.4 Payment-Related Information
When you purchase a pass or credits, you interact with Yoco, our payment gateway provider. MemorableCV does not receive, process, or store your card number, CVV, or other sensitive payment card details. Those details are handled entirely by Yoco under their own privacy policy and PCI-DSS compliance framework.
We do receive and retain:
- A record of your purchase (pass type, amount in ZAR, date)
- A transaction reference from Yoco
- Your payment method type (e.g., card, Google Pay) at a high level
3.5 Technical and Usage Data
When you use the Service, we may automatically collect:
- IP address and general location (country/region)
- Browser type and version, operating system
- Pages visited, features used, session duration, and clickstream data
- Error logs and performance data
- Referring URLs
This data is collected primarily through server logs, analytics tools, and cookies/local storage (see Section 12).
4. How and Why We Use Your Information
We process your personal information only for specific, explicitly defined, and lawful purposes in accordance with POPIA's conditions for lawful processing. Our purposes are:
| Purpose | Lawful basis under POPIA |
|---|---|
| Creating and managing your account | Performance of a contract with you |
| Storing your CV data (if you opt to save to your account) | Performance of a contract; your consent |
| Providing AI features (cover letter generation, CV scoring, AI rewrites) | Performance of a contract; your consent |
| Processing your purchases via Yoco | Performance of a contract; legal obligation |
| Sending transactional emails (account confirmation, receipts, pass expiry reminders) | Performance of a contract; legitimate interest |
| Customer support and responding to queries | Legitimate interest; legal obligation |
| Improving and securing the Service | Legitimate interest |
| Complying with legal obligations (tax records, regulatory requirements) | Legal obligation |
We will not use your personal information for purposes that are incompatible with those listed above without notifying you and, where required, obtaining your consent.
We do not sell your personal information to third parties.
We do not use your CV content to train AI models. When your CV content is sent to our AI provider for the purpose of generating output (cover letters, rewrites, job-match scores), it is used solely to produce that output for you.
5. Local-First Storage: How Your CV Data Is Held
MemorableCV is designed with a local-first approach to your CV data:
- Default — browser storage: By default, your CV content (including all text you type into the editor and any imported content) is stored in your own browser's IndexedDB (local storage on your device). This data does not leave your device unless you explicitly choose to save it to your account.
- Optional — account save: If you are signed in and choose to save a CV to your account, the CV data (structured text and settings, not raw uploaded files) is saved to our cloud database (hosted on Supabase). This is an explicit action on your part.
- What this means for you: If you use MemorableCV without saving to your account, or if you clear your browser data, your CV content may be lost. We recommend saving to your account if you want your CVs to persist across devices or browser sessions.
- PDF export: When you export your CV to PDF, the generation process occurs on our servers using your current CV data. The generated PDF is returned to you for download.
6. Sharing and Third-Party Processors
We share your personal information only where necessary to provide the Service. The following third parties act as operators (processors) under POPIA — they process personal information on our behalf, subject to contractual obligations to protect your data:
6.1 Supabase
Role: Authentication, database hosting, and backend infrastructure. What they process: Your email address, hashed password, session tokens, and (if you save CVs to your account) your CV data. Location: Supabase infrastructure may be hosted on cloud servers located outside South Africa (see Section 7). More info: https://supabase.com/privacy
6.2 Yoco
Role: Payment processing. What they process: Your payment card details, transaction amounts, and billing information. Yoco processes this data as an independent responsible party under their own privacy policy. MemorableCV does not store your card details. More info: https://www.yoco.com/za/privacy-policy/
6.3 OpenRouter and Downstream AI Providers
Role: AI feature processing (cover letter generation, AI text rewrites, CV-to-job-description matching). What they process: The relevant sections of your CV content and/or the job description text you submit when using AI features. This content is sent to OpenRouter, which routes requests to various large language model (LLM) providers. The specific downstream provider may vary. Important: Your CV text is transmitted to these providers to generate your requested output. We do not authorise these providers to use your content to train their models beyond what their standard terms permit, and we take reasonable steps to configure our integration accordingly. However, you should be aware that these providers may have their own data handling practices. Location: Processing occurs on servers outside South Africa (see Section 7). More info: https://openrouter.ai/privacy
6.4 Hosting and CDN Providers
We use third-party hosting and content delivery network (CDN) services to run the MemorableCV web application. These providers may process technical data (such as IP addresses) in the course of delivering the Service.
6.5 Other Disclosures
We may also disclose personal information:
- To comply with a legal obligation, court order, or lawful request by a public authority
- To protect the rights, property, or safety of MemorableCV, our users, or the public
- In connection with a merger, acquisition, or sale of all or part of our business (in which case you will be notified)
7. Cross-Border Transfers of Personal Information
Section 72 of POPIA places restrictions on the transfer of personal information to parties in foreign countries. Some of our third-party operators (Supabase, OpenRouter and downstream AI providers, and hosting/CDN services) process data on servers located outside South Africa.
Where we transfer personal information outside South Africa, we take steps to ensure adequate protection, including:
- Concluding data processing agreements with operators that impose POPIA-equivalent (or higher) data protection obligations
- Selecting providers who are subject to data protection laws or frameworks that provide a comparable level of protection to POPIA (for example, providers subject to the GDPR)
- Applying technical safeguards such as encryption in transit (TLS/HTTPS) and, where applicable, at rest
By using MemorableCV and its AI features, you acknowledge that your personal information (specifically, CV content submitted for AI processing) may be transferred to and processed in countries outside South Africa. We will only do this to the extent necessary to provide the features you have requested.
8. Security Safeguards
We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. These measures include:
- Encrypted transmission of data using HTTPS/TLS
- Hashed storage of passwords (we do not store plaintext passwords)
- Access controls limiting who within our team can access personal data
- Regular review of our security practices
- Prompt discarding of uploaded PDF files after parsing
Please note: No method of data transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and interests, we will notify affected parties and the Information Regulator as required by law.
You are also responsible for maintaining the security of your account credentials and for using the Service on secure, trusted devices.
9. Retention of Personal Information
We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required by law.
| Data type | Retention period |
|---|---|
| Account information (email, auth data) | Until you delete your account, plus a short period to comply with legal obligations |
| CV data saved to your account | Until you delete it or delete your account |
| CV data stored in your browser (IndexedDB) | Controlled by you; cleared when you clear browser data |
| Uploaded PDF files | Discarded immediately after parsing — not retained |
| Purchase and transaction records | Retained for the period required by South African tax and accounting law (generally 5 years) |
| Technical/usage logs | Generally up to 12 months, or shorter where practicable |
Deleting your account: You may request deletion of your account and associated data by contacting us at support@memorablecv.com. Upon verified request, we will delete your personal information from our active systems within a reasonable timeframe, except where retention is required by law.
10. Your Rights as a Data Subject Under POPIA
POPIA grants you the following rights in relation to your personal information:
- Right of access: You may request confirmation of whether we hold your personal information and request a copy of it.
- Right to correction: You may request that we correct or update inaccurate or incomplete personal information.
- Right to deletion (erasure): You may request that we delete your personal information, subject to legal retention obligations.
- Right to object: You may object to the processing of your personal information, for example, where we rely on legitimate interest as a basis.
- Right to lodge a complaint: If you believe we have processed your personal information unlawfully or in breach of POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa.
Information Regulator of South Africa
- Website: https://www.inforegulator.org.za
- Email (complaints): PAIAComplaints@inforegulator.org.za / POPIAComplaints@inforegulator.org.za
- Physical address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
To exercise any of your rights, please contact our Information Officer at support@memorablecv.com. We will respond within a reasonable period and in accordance with POPIA's requirements.
11. Children
MemorableCV is not intended for use by persons under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has provided us with personal information without appropriate consent, please contact us at support@memorablecv.com and we will take steps to delete that information.
12. Cookies and Local Storage
MemorableCV uses the following storage mechanisms:
Cookies:
- Essential / functional cookies: Used to maintain your login session and authentication state. These are necessary for the Service to function and cannot be disabled.
- Analytics cookies: We may use analytics tools that set cookies to help us understand how the Service is used. You may be able to opt out of analytics cookies through your browser settings.
Local storage / IndexedDB:
- Your CV content is stored in your browser's IndexedDB as part of our local-first design (see Section 5). This is core to the Service's functionality and is stored on your own device.
You can manage or clear cookies and local storage through your browser settings. Please note that clearing local storage will delete any CV data you have not saved to your account.
We do not use cookies for targeted advertising or to track you across third-party websites.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or the Service. When we make material changes, we will:
- Update the "Effective date" at the top of this document
- Notify you by email (if you have an account) or by a prominent notice on the website
Your continued use of the Service after the updated policy is posted constitutes acceptance of the changes, to the extent permitted by law.
14. Contact Us
For any privacy-related questions, requests to exercise your data subject rights, or concerns, please contact:
MemorableCV — operated as a sole proprietorship in South Africa
- Email: support@memorablecv.com
We aim to respond to all privacy enquiries within a reasonable period.
Last updated: 2 June 2025