Privacy Policy

What this policy covers

KiwiCV is a New Zealand owned and operated CV service. This policy explains how KiwiCV handles personal information when you use our website, free builder and optional Pro account. For privacy questions or requests, contact support@kiwicv.co.nz.

Your free CV stays on your device

You can build and download a CV without signing up, giving us an account email or providing payment details. The free builder saves your CV in your browser on your device. Your CV may include your name, contact details, work history, education, skills and other information you choose to add.

The live preview and PDF and Word downloads are generated in your browser. Creating an account does not automatically upload your CV saved in this browser. Uploading a document for import is different: that document is sent to our server for processing, as explained below.

You can remove locally saved information by clearing this website’s browser storage. This also removes your saved preferences and may sign you out. Downloaded files remain wherever you saved them.

Accounts and cloud saving

If you create an account, we handle your name, email address, authentication information and account settings to sign you in and manage your account. Google sign-in supplies account information such as your name and email. Email sign-in uses a verification code delivered through our email provider, Resend.

When you use Pro cloud saving, we store the CVs you save, their versions and any target roles, companies or job listings you attach. Supporting documents you upload to your account are stored as originals and extracted text. Convex provides our account data and file storage services.

Document imports and AI processing

When you upload a CV for import, we send the file to our server, extract its text and use an AI model to turn it into CV fields for you to review. The extracted text is sent through Vercel AI Gateway to the configured model provider. The provider can vary with the service configuration; contact us if you need to confirm the provider before uploading.

The imported source text and extracted information can become part of your Saved CV. Supporting-document uploads are converted to text and stored in your account library. These documents can contain sensitive information, so only upload information you want KiwiCV to handle, and avoid unnecessary information about other people.

LinkedIn import retrieves details from the profile URL you provide. When our managed scraper is enabled, we send that URL to HarvestAPI through Apify to retrieve your profile. You review the imported details before adding them to your CV. LinkedIn may restrict access or omit details.

When you request a Pro rewrite, recommendations or job tailoring, we process your CV, the supporting documents you select and any job listings you supply through our AI service. Text needed for your request is sent through Vercel AI Gateway to the configured model provider. You review proposed changes before applying them to your CV. We will update this policy before introducing materially different uses of your information.

Payments

Stripe handles checkout. KiwiCV keeps purchase and entitlement information needed to manage Pro access, including payment references and payment status. Card details are handled by Stripe rather than stored in the CV builder.

Browser storage and technical information

We use browser storage to remember your Saved CV and light or dark mode preference, and authentication cookies to keep you signed in. These are used to make the service work.

Website hosting and service providers may process technical information such as IP addresses, request details and diagnostic logs to deliver the service, prevent abuse and investigate errors. The current application does not include advertising trackers or a dedicated visitor analytics integration.

Why information is used and who receives it

Personal information is used to provide the features you choose, process documents, manage accounts and Pro access, deliver sign-in emails, respond to support requests and operate the service. Providing account details or uploading documents is optional, but features that need those details cannot work without them.

Information is processed by the service providers described above and our hosting provider, Vercel, where needed for those purposes. Some providers process or store information outside New Zealand. New Zealand ownership does not mean all information stays in New Zealand. We may also need to disclose information where required by law.

Keeping and removing information

A CV saved in this browser remains in your browser until it is replaced or removed. Account CVs, versions and supporting documents are stored to provide your account’s features. You can remove supporting documents and delete your account through the account controls. Archiving a CV keeps it in your catalogue; it does not delete it.

Deleting an account removes its KiwiCV profile, stored CVs and supporting documents from active account storage. This does not remove files you have downloaded or your device’s Saved CV. Provider backups, diagnostic records and payment records may have separate retention periods. Contact us for details or a request concerning those records.

Access, corrections and privacy concerns

Under New Zealand’s Privacy Act 2020, you can request access to personal information we hold about you and ask for it to be corrected. You can edit your CV and account details directly, or email support@kiwicv.co.nz for an access, correction or deletion request. We may need to verify your identity before acting on a request.

If you have a concern, please contact us so we can investigate. You can also contact the New Zealand Office of the Privacy Commissioner at privacy.org.nz. We will update the date on this page when this policy changes.