CV as a Service

Privacy Policy

Last updated: 18.09.2025

This Privacy Policy explains how CVaaS (“we,” “us,” or “our”), owned and operated by Sataklela OÜ, collects, uses, stores, and protects your personal data. We are committed to safeguarding your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the UK GDPR.

By using CVaaS, you agree to the practices described in this policy.

1. Data Controller

The data controller responsible for your information is:

Sataklela OÜ
Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 67/1-13b, 10115
Registry code: 3225737
Email: sataklela@gmail.com

2. What Data We Collect

We collect and process the following types of personal data:

  • Identity Data: Name, email address, professional profiles (e.g. LinkedIn).
  • Content Data: CVs, cover letters, and other documents you upload or generate.
  • Usage Data: Log files, IP addresses, device/browser information, and analytics data.
  • Payment Data: Billing information (if you subscribe to paid plans).

We do not knowingly collect data from children under 16.

3. How We Use Your Data

Your personal data is used for the following purposes:

  • To provide CVaaS services (e.g. CV/cover letter/SOP generation).
  • To improve and personalise our service.
  • To process payments and manage subscriptions.
  • To communicate with you (e.g. support, updates, notices).
  • To comply with legal obligations.

We will never sell your data to third parties.

4. Legal Basis for Processing

We rely on one or more of the following legal grounds:

  • Performance of a contract – to provide services you request.
  • Consent – where you explicitly agree (e.g. marketing emails).
  • Legitimate interests – to improve services and maintain security.
  • Legal obligation – to comply with regulatory requirements.

5. Data Sharing and Transfers

We may share your data with:

  • Service providers (e.g. cloud hosting, payment processors) under strict data protection agreements.
  • Authorities where required by law.

If data is transferred outside the EU/UK, we ensure appropriate safeguards (e.g. EU Standard Contractual Clauses).

6. Data Retention

We retain your personal data only as long as necessary:

  • Account and content data: retained while your account is active, and deleted upon request or after 24 months of inactivity.
  • Payment records: retained for the legally required period (usually 7 years).

7. Your Rights

Under GDPR and UK GDPR, you have the right to:

  • Access your data.
  • Rectify inaccurate data.
  • Request erasure (“right to be forgotten”).
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time (where consent is the legal basis).
  • Lodge a complaint with a supervisory authority (e.g. Estonian Data Protection Inspectorate or the UK ICO).

To exercise your rights, contact us at sataklela@gmail.com.

8. Security

We use industry-standard technical and organisational measures (encryption, access controls, secure hosting) to protect your data against unauthorised access, disclosure, or misuse.

9. Cookies and Tracking

CVaaS uses cookies and similar technologies to improve functionality, personalise content, and analyse usage.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you use our service. They help us recognise you, remember preferences, and improve user experience.

9.2 Types of Cookies We Use

  • Essential cookies – Required for the basic operation of CVaaS.
  • Analytics cookies – Help us understand how the service is used.
  • Functional cookies – Remember your preferences and settings.
  • Third-party cookies – May be used for secure payments or embedded services.

9.3 Managing Cookies

You can control or delete cookies through your browser settings. Some features of CVaaS may not function properly if you disable cookies.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or in-app notifications.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact:

Sataklela OÜ
Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 67/1-13b, 10115
Email: sataklela@gmail.com