Last updated: 13 July 2026
This Privacy Policy explains how MyCV.gg, operated by MyCV.gg, Riyadh, Kingdom of Saudi Arabia ("we", "us"), handles your personal data. We follow the Saudi Personal Data Protection Law (PDPL).
1. Data we collect
- Account data: your login email and a hashed password.
- Profile & CV content: the information you add to build your CV — name, contact details, work history, education, skills, and any photo you upload.
- Usage data: privacy-friendly product analytics (pages viewed, features used) and basic technical data such as approximate location and device/browser type.
2. How we use your data
- To provide and operate the Service (store your CVs, render previews, export PDFs).
- To power AI features when you choose to use them (see section 3).
- To secure accounts, prevent abuse, and fix problems.
- To send essential emails (email verification, password reset, security notices).
- To understand and improve the product, in aggregate.
3. AI features and your CV content
When you use an AI feature, the relevant CV content is sent to an AI provider to generate the result. Current providers may include DeepSeek and Anthropic. If you do not use AI features, your content is not sent to them.
For AI review and AI writing, we remove direct identifiers before sending — your name, email, phone, address, photo, link URLs, and certificate or licence numbers are withheld from the AI provider.
Importing a CV file is the exception. To read your file we send its text to the AI provider as it appears in the document, including your name and contact details, because identifying those fields is the purpose of the import. The file itself is never stored on our servers and the extracted text is not written to disk or kept after the response.
4. Analytics
We use PostHog (hosted in the EU) for product analytics. It is configured to be cookieless and does not track you across other websites. We use it to understand which features are used, not to profile individuals.
5. Email
We use Resend to deliver transactional emails (verification, password reset, email change and security notices). We do not send marketing email without your consent.
6. Where your data is stored
Account and CV data is stored in a managed PostgreSQL database (Neon). Passwords are stored only as salted hashes. Data is encrypted in transit (HTTPS). Some of our processors (database, analytics, email, AI, payments) may store or process data outside Saudi Arabia; we use reputable providers and appropriate safeguards.
7. Sharing
We do not sell your personal data. We share data only with the service providers that help us operate MyCV.gg (hosting/database, analytics, email, AI, and — for Pro — our payment provider), and where required by law.
8. Retention
We keep your data while your account is active. You can delete your account at any time in Settings (or by emailing [email protected]), which removes your profile and CV data from active systems. Backups are cycled out on a routine schedule.
9. Your rights
Under the PDPL you may request to access, correct, or delete your personal data, and to withdraw consent. You can do this in-app — edit or delete individual content, or delete your whole account in Settings. For other requests, email [email protected]; we will respond as required by law.
10. Children
The Service is not intended for anyone under 16, and we do not knowingly collect data from children.
11. Changes
We may update this Policy. Material changes will be reflected in the "Last updated" date and, where appropriate, communicated to you.
12. Contact
For privacy questions or requests: [email protected].