Privacy Policy

This Privacy Policy explains how Maoog Software (“Company,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal data when you use NovatypalCV (the “Service”), including our website, dashboard, resume builder, payment flows, and related support channels.

This Privacy Policy is designed for our global users. If you are located in Türkiye, please also review our KVKK Disclosure Notice, which provides additional information required under Turkish personal data protection law.

1. Who We Are

• Data Controller / Company: Maoog Software
• Trade Name / Brand: NovatypalCV
• Address: Nidakule Göztepe, Merdivenköy Mah. Bora Sok. No:1, Istanbul, Turkey
• Email: privacy@maoog.software
• Support Email: support@maoog.software

2. Personal Data We Collect

We may collect the following categories of personal data:

• Account and identity data: Name and surname, Email address, Login credentials, User account identifiers.
• Profile and content data: Resume/CV content, Cover letters, Job descriptions, User-entered career information, Files or text uploaded to the Service.
• Transaction and billing data: Payment status, Order and subscription records, Invoice-related details, Limited payment metadata provided by our payment provider (We do not store your full credit card number or card security code on our servers).
• Technical and usage data: IP address, Device/browser information, Log data, Session records, Analytics events, Cookie and similar technology data.
• Communication data: Support messages, Feedback submissions, Email communications.

3. How We Use Personal Data

We use personal data to:

• create and manage user accounts,
• provide the Service and core product functionality,
• generate resumes, cover letters, and related AI-assisted outputs,
• process payments and maintain billing records,
• send transactional emails such as account verification, password reset, purchase confirmations, and service notices,
• respond to support requests and user feedback,
• improve performance, reliability, and user experience,
• detect fraud, abuse, unauthorized access, and security incidents,
• comply with legal, tax, accounting, and regulatory obligations,
• establish, exercise, or defend legal claims.

4. AI Processing

When you submit CV content, job descriptions, prompts, or similar materials, those inputs may be processed through AI systems and infrastructure providers used to generate requested outputs. We do not use your private content for unrelated commercial sale. Where third-party AI providers are used, your data is processed only to the extent necessary to provide the Service, subject to the applicable provider relationship and technical configuration.

5. Legal Bases for Processing

Depending on your location and applicable law, we process personal data based on one or more of the following grounds:

• performance of a contract,
• compliance with legal obligations,
• our legitimate interests in operating, securing, and improving the Service,
• your consent, where consent is legally required.

6. Sharing of Personal Data

We may share personal data with:

• infrastructure and hosting providers (Supabase, Vercel),
• authentication and database service providers,
• payment processors (Iyzico),
• email delivery and support providers (Resend),
• analytics and security providers,
• AI service providers used to generate requested outputs (Anthropic, Apify),
• legal, regulatory, tax, or public authorities where required by law,
• professional advisors such as lawyers, accountants, and auditors.

We do not sell personal data as a standalone data brokerage business.

7. International Transfers

Because the Service may use global infrastructure and service providers, personal data may be processed in countries other than your own. Where required, we take reasonable measures to use appropriate contractual, technical, and organizational protections.

8. Cookies and Similar Technologies

We use cookies and similar technologies for: authentication, session continuity, security, analytics, product performance measurement, and user preference storage. Where legally required, we offer cookie notice and preference controls.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain account records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and applicable legal requirements.

10. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and unlawful disclosure. However, no system can be guaranteed to be 100% secure.

11. Your Rights

Depending on your location, you may have rights to: request access to your personal data, request correction of inaccurate data, request deletion of certain data, object to or restrict certain processing, receive a copy of certain data, withdraw consent where processing is based on consent, and submit a complaint to a competent supervisory authority. Users in Türkiye should also review the rights described in our KVKK Disclosure Notice.

12. Children

The Service is not directed to children under the age required by applicable law. We do not knowingly collect personal data from children in violation of applicable law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date and, where appropriate, provide additional notice.

14. Contact

For privacy-related questions or requests, contact us at: privacy@maoog.software