Privacy Policy | CV Genius

Last updated: 15 May 2026

Thank you for choosing CVGenius, operated by Sonaga Tech Limited, Hamilton, Zweigniederlassung Luzern (‘Company’, ‘Service Provider’, ‘we’, ‘us’ or ‘our’), to craft your CV and cover letter. We are dedicated to safeguarding your information and your right to privacy. Your data controller is Sonaga Tech Limited, Hamilton, Zweigniederlassung Luzern. Should you have any queries or concerns about our policy or our practices regarding your personal information, kindly contact us at support@cvgenius.com.

When you visit our website https://cvgenius.com (the ‘Site’), utilise any of our services, or share personal information with us, we take your privacy very seriously. In this Privacy Policy, we seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have concerning it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this Privacy Policy that you do not agree with, please discontinue your use of the Site and our services.

This Privacy Policy applies to all information collected through our Site. It also applies to any service related to the Site, sales, marketing, or events (we refer to them collectively in this Privacy Policy as the ‘Services’).

Please read this Privacy Policy carefully as it will help you make informed decisions about sharing your personal information with us.

Table of contents

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect the information you provide us with when opening an account or registering at the Site and expressing an interest in obtaining information about us or our products and Services, when participating in activities on the Services or otherwise contacting us. Please be aware that in certain instances, supplying some personal information may be necessary to use our service. Otherwise, we may not be in a position to provide our Services. This relates specifically to your email address (if you choose to register the account) and the information you provide whilst using our Services.

The information that we gather depends on the context of your interactions with the Site and the Services, the choices you make, and the products and features you use. The personal information we gather may comprise, though is not confined to, the following:

Information provided by you: We gather data provided by you when using our Services, that may be, for instance, first name, last name, email address, telephone number, address, the information you input into our tools (professional experience, details about your education, skills), but also collected from surveys, CVs and other job application data and other similar data.

Credentials: We collect passwords, password hints, and similar security information used for authentication and account access.

Social media login data: We offer you the option to register using social media account details, such as your Facebook or another social media account. If you choose to register in this manner, we will gather the information described in the section called ‘HOW DO WE HANDLE YOUR SOCIAL LOGINS‘ below.

All information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

We may collect certain information when you visit, use, or navigate the Site and the Services. This information may comprise device and usage information, such as your IP address, browser and device features, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is chiefly required to maintain the security and operation of our Services and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Policy.

Online identifiers We collect devices, tools, and protocols, such as IP (Internet Protocol) addresses, cookie identifiers, or others such as the ones used for analytics and marketing, device geolocation, and other similar data.

Information collected from other sources

We may collect information about you from third parties when you use your social media account to register with us. Examples of the data collected from this service are your email, first name, surname, and login information from those third parties.

2. HOW DO WE USE YOUR INFORMATION?

We use personal information gathered through our Services for a variety of purposes as detailed below. We process your information for these purposes based on our legitimate business interests, to enter into or carry out a contract with you, with your consent, and/or to comply with our legal obligations. We indicate the specific processing grounds we rely on for the reasons described next to each purpose listed below.

We use the information we collect or receive for the following purposes:

To facilitate account creation and login process: If you choose to link your third-party social media account to your account with us (such as your Google or Facebook account), we may use the information you allowed us to collect from those third parties to facilitate account creation and login process for the performance of the contract. See the section below headed ‘HOW DO WE HANDLE YOUR SOCIAL LOGINS‘ for further information.
To send you marketing and promotional communications: We may use the information you send to us for marketing purposes as this is our legitimate interest. You can opt out of our marketing emails at any time (see ‘WHAT ARE YOUR PRIVACY RIGHTS‘ below). Marketing emails from our partners will only be sent to you if you give your permission.
To provide you with our Services: to respond to your questions and enquiries; (ii) provide customer support, (e.g. to fulfil product and service orders made by you, give you information about your account to resolve disputes, issues with your account/profile or the Site, administer a contest, sweepstake or promotion. We may use your details to send you information on a product, service, and new feature and/or information about changes to our terms, conditions, and policies,(iii) request feedback and contact you about your use of our Services.
To post testimonials: We publish testimonials on our Services that might include user information. Before posting a testimonial, we will ask your permission to use your name and testimonial. If you would like to update or remove your testimonial, kindly get in touch with us at privacy@cvgenius.com, and make sure you provide your name, testimonial location, and contact details.
Deliver targeted advertising to you: We may use your information to develop and display content and advertising (and work with third parties who do so) tailored to your interests and/or location and to measure its effectiveness. This is our legitimate business interest. For more information, see our Cookie Policy.
Administer prize draws and competitions: We may use your information to administer prize draws and competitions when you choose to take part.

Request feedback: We may use your information to request feedback and to contact you about your use of our Services.

To protect our Services: We may use your information as part of our efforts to keep our Services safe and secure (for example, for fraud monitoring and prevention).
To enforce our terms, conditions and policies for Business Purposes, Legal Reasons and Contractual.
Respond to legal requests and prevent harm: If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond. This is our legitimate interest.

For location-based Services: When you access our Site through your mobile device, we may access your location to provide you with location-based Services and other personalised content. This is our legitimate interest.

For other business purposes: We may use your information for other business purposes (this is our legitimate interest), such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our Services, marketing, and your experience. We may utilise and store this information in aggregated and anonymised form so that it is not associated with individual end users and does not include personal information.

3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?

We may share information with:

Suppliers, consultants, and other third-party service providers. We may share your data with third-party vendors, service providers, contractors, or agents who carry out services for us or on our behalf and require access to such information to do that work. Examples include payment processing, data analysis, email delivery, hosting services, customer support, and marketing efforts. We may permit chosen third parties to use tracking technology on the Services, which will enable them to gather data about how you engage with the Services over time. This information may be used to, amongst other things, analyse and track data, determine the popularity of specific content, and better understand online activity. We may also share your information with third parties if the activity is recognised to be unlawful, fraudulent, or poses a potential risk to security. Unless stated in this Policy, we do not share any of your information with third parties for their marketing purposes. We have contracts in place with our data processors and have instructed them to hold your data securely and use it only for the purpose set out in the contract.

If you are an EU resident, please note that we are cooperating with suppliers all over the world. That is why your data may be transferred outside the European Economic Area (‘EEA’). We take every precaution to ensure your data is secure. This is why transfer will only take place in accordance with the applicable regulations. To obtain a copy of the relevant transfer mechanism or additional information on the transfers, please address these requests to legal@cvgenius.com.

Business transfers. We may share or transfer your information in connection with or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. This may only occur in accordance with applicable laws, for instance, when, after the assessment carried out by the parties to the transaction, such legitimate interest is not overridden by your interest or fundamental rights and freedoms.

Business partners. We may share your information with our business partners to offer you certain products, services, or promotions.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. You may be able to choose your cookie preferences, depending on your country of residence. Specific information about how we utilise such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

5. HOW DO WE HANDLE YOUR SOCIAL ACCOUNT LOGINS?

Our Services offer you the ability to register and log in using your third-party social media account details. Where you choose to do this, we may receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, friends list, profile picture, as well as other information you choose to make public.

We use the information we receive solely for the purposes described in this Privacy Policy or that are otherwise made explicit to you on the Site. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy policy to understand how they collect, use, and share your information and how you can set your privacy preferences on their websites and applications.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your information for as long as it is necessary for the purposes set out in this Privacy Policy unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When your data is processed based on our legitimate interest (for instance, for data analysis, or to respond to your legal request), you can always object to such processing. If you object to the processing of your personal data, we will cease such processing if the objection is well-founded by law.

When we have no ongoing legitimate business need to process your information, we will either delete or anonymise it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your information and isolate it from any further processing until deletion is possible.

If data is processed based on your consent, we will process it until you withdraw your consent. If you want to withdraw your consent, please contact us.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented suitable technical and organisational security measures designed to protect the security of any personal information we process. However, please also bear in mind that we cannot guarantee that the Internet itself is 100% secure. Whilst we will endeavour to safeguard your information, the transmission of information to and from our Services is at your own risk. You should only access the Services within a secure environment. Our data protection officer may be contacted by sending an email to dpo@sonagatech.com.

8. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly solicit data from or market to children under 18 years of age. By utilising the Services, you represent that you are at least 18. If we discover that information from users under the age of 18 has been gathered, we will deactivate the account and take reasonable steps to promptly remove such data from our records. If you become aware of any data we have collected from children under the age of 18, please contact us at privacy@cvgenius.com.

9. WHAT ARE YOUR PRIVACY RIGHTS?

Based on the laws of some countries, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please submit a request by clicking here. You can also make your request by sending an email to privacy@cvgenius.com. or contacting one of our representatives through the phone number provided here. We will respond to your request within the timeframe provided by law.

In some regions (like the European Economic Area), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request data rectification or erasure; (iii) to restrict the processing of your personal information; (iv) right to withdraw consent; (v) right to object (vi) if applicable, to data portability; (vii) right to restrict the processing of your personal data; and (viii) right not to be subject to a decision based solely on automated processing. In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please click here, send us an email to privacy@cvgenius.com or use the contact details provided in Section 12, below. You also have a right afforded by Article 77 of GDPR to file a complaint with the competent data protection authority. This complaint may be filed where the data protection breach occurred, at your place of work or your residence.

Please know that some minimal information will be requested for identification purposes and as a safeguard to your privacy before providing access to your personal data. If you do not provide this information it will affect our ability to provide the information requested in a timely manner. GDPR provides us the right to refuse and/or charge a fee for requests that are found to be manifestly unfounded or excessive. We will consider and act upon any request in accordance with applicable data protection laws. For the purposes of this section your data controller is Sonaga Tech Limited, Hamilton, Zweigniederlassung Luzern.

We have appointed EDPO, Avenue Huart Hamoir 71 – 1030 Brussels, Belgium, as our EU representative for GDPR purposes. If you want to exercise your rights with respect to your personal data, you may do so by sending an email to legal@cvgenius.com

If we are relying on your consent to process your information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal.

If you have questions or comments about your privacy rights, you may email us at privacy@cvgenius.com.

Account details

If you would at any time like to review or change the information in your account or terminate your account, you can:

■ Log in to your account settings and update your user account.

■ Contact us using the contact details provided.

Upon receiving your request to terminate your account, we will proceed to deactivate it. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use, and/or comply with legal requirements.

Cookies and similar technologies: Most web browsers are set to accept cookies by default. If you prefer, you can normally choose to set your browser to remove cookies and reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features of our Services. To opt out of interest-based advertising by advertisers on our Services visit https://optout.aboutads.info/. For further information, please see our Cookie Policy.

Opting out of email marketing: You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list – however, we will still need to send you service-related emails that are necessary for the administration and use of your account. To otherwise opt out, you may:

■ Note your preferences whilst registering an account with the site;

■ Access your account settings and update preferences; or

■ Contact us using the contact details below.

10. CALIFORNIA AND US STATES PRIVACY RIGHTS

This section applies to users who are California residents, in compliance with the California Consumer Privacy Act (“CCPA”), and may also apply to residents of other US States that provide similar privacy rights. “Personal information”, according to the CCPA is “information that identifies, relates to, describes, is capable of being associated with or could reasonably be linked, directly or indirectly, with a particular consumer or household.”

Do Not Sell or Share my Personal Information.The California Privacy Rights Act (CPRA), which amends the CCPA, states that “Sell,” “selling,” “sale,” or “sold,” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration. When you visit our page, create an account, subscribe, or use our services we may drop cookies or web beacons and share personal information with our service providers or third parties, as part of providing our services. You will find more details about the third parties we share information with and the purpose in this Privacy Policy. Therefore, we have included an option in the footer of our main page that allows you to opt-out of the selling or sharing of your personal information. In case you opt-out we will honor that request for at least twelve (12) months. There is an identification process as part of the request, so we ask you to please complete the form with accurate and complete information.

We will also honor “Do not Sell or Share my Information” requests from residents of other US states, , in compliance with applicable privacy regulations. In case you want to complete your request through an authorized agent the representative will need to provide the necessary information to validate their appointment. You may submit a “Do Not Sell or Share request by clicking here or you can also send a “Do Not Sell or Share my personal Information” request by email to privacy@cvgenius.com.

We take your privacy very seriously. Our sites directed to US residents recognize and honor the Global Privacy Control (“GPC”) signal, as mandated by applicable US state privacy laws.

The GPC signal is a way that you can communicate your privacy settings when browsing the internet. When our Site detects an active GPC signal, we process it in accordance with applicable US state law requirements. This includes treating the GPC signal as a directive not to sell or share your personal information with our advertisers.

If we detect an active GPC signal from your browser, we will not display a cookie banner. Instead we will display a notice confirming that your GPC signal preferences have been honored and we will automatically apply the required privacy settings to your personal information, as required by applicable state law and in accordance with our Privacy Policy

Under the CCPA we are prohibited from discriminating against California residents for exercising their rights. There are also certain requirements we must meet if any financial incentives are offered to California residents in connection with our handling of their personal information (we improve our offering when the difference in pricing, rates or quality of goods is reasonably related to the value of the California resident’s personal information).

If you are a California resident, or a resident of a state with a data privacy law, subject to some exceptions, you have the following rights:

The right to request deletion of personal information that we have collected about you.
The right to request a copy of the specific pieces of personal information that we have collected about you in the last 12 months.
The right to request that we disclose certain information about how we have collected, used, and disclosed your personal information, subject to certain exceptions under applicable law.
Generally, this covers the prior twelve (12) months of your request. However, for California residents, where we retain personal information for more than twelve (12) months, we will include all the personal information retained dating back to January 1, 2022. Our response shall include the categories of personal information collected and sources of personal information, the business purposes for collecting and selling personal information, the categories of third parties with whom we have shared your personal information, the categories of personal information that we have disclosed with a third party for a business purpose, the categories of personal information collected and the categories of third parties to whom your personal information has been sold and the specific categories of personal information sold to each category of third parties.
1. If your request to exercise your privacy rights is denied, you may submit an appeal by emailing us at legal@cvgenius.com. If you are dissatisfied with the resolution of your appeal, you may raise the matter with the Attorney General or the agency charged with enforcing consumer privacy laws in the state where you reside.

We may collect and share for a business purpose the following personal information from California residents:

name, contact information and identifiers – real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
customer records – electronic customer records containing personal information, such as name, signature, physical characteristics or description, address, telephone number, education, employment, employment history.
protected classifications – characteristics of protected classifications under California or federal law such as race, color, sex, age, religion, national origin, disability, citizenship status, and genetic information.
purchase history and tendencies – commercial information including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
usage data – internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a California consumer’s interaction with an Internet website, application, or advertisement.
geolocation data – precise geographic location information about a particular individual or device.
employment history – professional or employment-related information.
education information – information about education history or background.
AudioVisual – audio, electronic, visual, thermal, olfactory, or similar information.
Inferences drawn from any of the information identified above to create a profile about a California consumer reflecting the California consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

The categories above do not address our handling of personal information that is subject to an exemption under Section 1798.145(c) – (f) of the CCPA.

You may submit a deletion, copy or right to know request online by clicking here, by emailing us at privacy@cvgenius.com or contacting us at the toll-free number in the contact us section below. CCPA prohibits businesses from any type of discrimination against California residents for exercising any of their rights under the CCPA.

11. DO WE MAKE UPDATES TO THIS POLICY?

We may update this Privacy Policy from time to time. The updated version will be indicated a revised ‘Last updated’ date and will be effective as soon as it is accessible. If we make substantial alterations to this Privacy Policy, we might inform you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy regularly to be informed of how we are protecting your information.

12. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

If you have queries or remarks about this policy, you may contact us by ringing 0808 196 2674 (available Monday to Friday, 8am–12am (midnight)), by sending an email to privacy@cvgenius.com, or by post to Sonaga Tech Limited, Hamilton, Zweigniederlassung Luzern, Hertensteinstrasse 51, 6004 Luzern, Switzerland.