Privacy Policy

This Privacy Policy explains how Maoog Software (“Company,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal data when you use NovatypalCV (the “Service”), including our website, dashboard, professional document tools, payment flows, and related support channels.

This Privacy Policy is designed for our global users. If you are located in Türkiye, please also review our KVKK Disclosure Notice, which provides additional information required under Turkish personal data protection law.

1. Who We Are

• Data Controller / Company: Maoog Software
• Trade Name / Brand: NovatypalCV
• Address: Nidakule Göztepe, Merdivenköy Mah. Bora Sok. No:1, Istanbul, Turkey
• Email: privacy@novatypalcv.com
• Support Email: support@novatypalcv.com

2. Personal Data We Collect

We may collect the following categories of personal data:

• Account and identity data: Name and surname, Email address, Login credentials, User account identifiers.
• Profile and content data: Resume/CV content, Cover letters, Job descriptions, User-entered career information, Files or text uploaded to the Service.
• Transaction and billing data: Payment status, Order and subscription records, Invoice-related details, Limited payment metadata provided by our payment provider (We do not store your full credit card number or card security code on our servers).
• Technical and usage data: IP address, Device/browser information, Log data, Session records, Analytics events, Cookie and similar technology data.
• Communication data: Support messages, Feedback submissions, Email communications.

3. How We Use Personal Data

We use personal data to:

• create and manage user accounts,
• provide the Service and core product functionality,
• generate professional career documents, cover letters, and related AI-assisted outputs,
• process payments and maintain billing records,
• send transactional emails such as account verification, password reset, purchase confirmations, and service notices,
• respond to support requests and user feedback,
• improve performance, reliability, and user experience,
• detect fraud, abuse, unauthorized access, and security incidents,
• comply with legal, tax, accounting, and regulatory obligations,
• establish, exercise, or defend legal claims.

4. AI Processing

When you submit CV content, job descriptions, prompts, or similar materials, those inputs may be processed through AI systems and infrastructure providers used to generate requested outputs. We do not use your private content for unrelated commercial sale, and we do not use your private career content to train AI models without your consent. Where third-party AI providers are used, your data is processed only to the extent necessary to provide the Service, subject to the applicable provider relationship and technical configuration.

No automated decision-making. We do not carry out automated decision-making or profiling that produces legal effects concerning you, or that similarly significantly affects you, within the meaning of Article 22 of the GDPR. Our AI drafts and edits documents that you own, at your request, and returns the result only to you. It does not score, rank, or classify you as a person, and we do not provide its output to employers, recruiters, or hiring platforms. See How our AI works.

5. Legal Bases for Processing

Depending on your location and applicable law, we process personal data based on one or more of the following grounds:

• performance of a contract,
• compliance with legal obligations,
• our legitimate interests in operating, securing, and improving the Service,
• your consent, where consent is legally required.

6. Sharing of Personal Data

We may share personal data with:

• infrastructure and hosting providers (Supabase, Vercel),
• authentication and database service providers,
• our payment service provider, which collects payment on our behalf,
• email delivery and support providers (Resend),
• product analytics and security providers (PostHog, Vercel Analytics, Arcjet),
• advertising conversion measurement (Google Ads),
• AI service providers used to generate requested outputs (Anthropic),
• a data-sourcing provider used to collect public job postings for our job index (Apify),
• legal, regulatory, tax, or public authorities where required by law,
• professional advisors such as lawyers, accountants, and auditors.

We do not sell personal data as a standalone data brokerage business.

7. International Transfers

Because the Service may use global infrastructure and service providers, personal data may be processed in countries other than your own. Where required, we take reasonable measures to use appropriate contractual, technical, and organizational protections.

8. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, session continuity, security, product analytics, advertising conversion measurement, and preference storage. Non-essential cookies (product analytics and advertising) are only activated after you accept them in our cookie banner; you can accept, reject, or change your choice at any time. A full breakdown of every category and provider is in our Cookie Policy.

9. Data Retention and Deletion

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain account records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and applicable legal requirements.

You can export your data or permanently delete your account and its content at any time from your account settings, or by contacting us at privacy@novatypalcv.com. When you delete your account, your account and career-content data are removed from our active systems within 30 days, except for limited records we are required to keep for legal, tax, accounting, or fraud-prevention purposes (for example, invoice and transaction records retained for the period required by applicable law).

10. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and unlawful disclosure. However, no system can be guaranteed to be 100% secure.

11. Your Rights

Depending on your location, you may have rights to: request access to your personal data, request correction of inaccurate data, request deletion of certain data, object to or restrict certain processing, receive a copy of certain data, withdraw consent where processing is based on consent, and submit a complaint to a competent supervisory authority. Users in Türkiye should also review the rights described in our KVKK Disclosure Notice.

12. Children

The Service is not directed to children under the age required by applicable law. We do not knowingly collect personal data from children in violation of applicable law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date and, where appropriate, provide additional notice.

14. Contact

For privacy-related questions or requests, contact us at: privacy@novatypalcv.com