Privacy Policy

1Scope of This Policy

SendTheCV is a CV distribution platform. We process information so users can upload or provide a CV, distribute it to recruitment-related contacts, connect a supported email account where applicable, send CV distribution emails and process replies connected with those distribution emails.

This policy does not describe SendTheCV as a job-search or job-placement service. Employers and recruiters independently decide whether to contact, interview or hire a user.

2Information We Collect

We may collect information you provide directly, including your name, email address, telephone number, account details, CV, professional profile information, employment history, education, qualifications, skills, location and other information you choose to include in your CV.

We may also collect subscription and transaction information, support communications, technical information such as IP address, browser or device information, login and security records, and website usage information reasonably required to operate and protect the Service.

3CV Information and Distribution

When you activate CV distribution, you instruct SendTheCV to distribute your CV and related professional information to employers, recruiters, HR professionals, talent acquisition professionals and other recruitment-related contacts selected from or available through our database.

Recipients may receive the personal information contained in your CV, including your name, contact details and professional history. You control what you place in your CV and should avoid including information that is not reasonably required for professional CV distribution.

Once an independent recipient receives your CV, that recipient may process the information under its own legal obligations and privacy practices. SendTheCV cannot automatically recall or delete copies already received by an independent recipient.

4Connected Email Accounts

Where you choose to connect Gmail, Google Workspace, Microsoft Outlook, Microsoft 365 or another supported email account, SendTheCV may process account and email data needed to provide the connected CV distribution features you authorize.

Connecting an account is based on your action and authorization. Your email provider will show the permissions being requested before you approve access.

5Google User Data

If you connect a Google account, the types of Google user data accessed depend on the permissions you approve and the features you use. This may include your Google account email address and profile identifiers, permission to send email, and, where required for reply processing, access to relevant messages, message content, headers, sender and recipient details, message IDs, timestamps and thread information.

SendTheCV uses Google user data only to provide, maintain and secure the CV distribution and related email functionality you authorize. We do not use Google user data for unrelated advertising, sell it, or use it to build advertising profiles.

SendTheCV's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, and applicable Google Workspace API requirements.

We request only permissions that are reasonably necessary for the features being provided. The actual permissions requested are shown in Google's authorization flow before you consent.

6Microsoft Account and Microsoft Graph Data

If you connect a Microsoft account, SendTheCV may access Microsoft account or Microsoft Graph data within the permissions you approve. Depending on the functionality you activate, this may include account identifiers, your email address, permission to send mail, and access to relevant messages or threads required to identify and process replies.

Microsoft data is used only to provide, maintain and secure the SendTheCV CV distribution and related email functionality you authorize. The actual permissions requested are shown in Microsoft's consent flow before you approve access.

7How We Use Connected Email Data

We use connected email data to authenticate the account, send CV distribution emails requested through SendTheCV, identify and process replies to those emails, associate replies with earlier distribution activity, display relevant replies or status information in your account, provide support for the connected feature, maintain security and prevent abuse, and comply with applicable legal obligations.

Access to a connected mailbox is not permission to use email content for unrelated purposes.

8Data We Do Not Use for Advertising or Sale

We do not sell connected Google or Microsoft email content or OAuth authorization data.

We do not use connected mailbox content for targeted advertising, advertising profiles or unrelated marketing.

We do not transfer connected email data to third parties except where necessary to provide or secure the Service, where you direct or consent to the transfer, where required by law, or as otherwise permitted by the applicable provider policy and law.

9Human Access to Email Data

Employees and contractors do not have unrestricted permission to browse connected mailboxes.

Human access to connected email data is limited to situations permitted by applicable provider rules and law, such as when you specifically ask us to investigate a support issue and access to the relevant data is necessary, when access is required for security or abuse investigation, or when we must comply with a legal obligation.

Any human access is limited to the information reasonably needed for that purpose.

10OAuth Tokens and Authentication Data

SendTheCV may receive and store OAuth access tokens and, where required for continued authorized access, refresh tokens issued by Google, Microsoft or another supported provider.

Tokens are used to authenticate authorized API requests for the features you have enabled. We do not treat OAuth tokens as passwords and do not display them publicly.

We use reasonable technical and organizational safeguards designed to protect authentication data from unauthorized access, use or disclosure.

11How We Use Personal Information

We may use personal information to create and manage your SendTheCV account, provide CV distribution, process connected email functions you authorize, manage subscriptions and payments, provide support, maintain service records, prevent fraud or abuse, secure the platform, troubleshoot technical issues, comply with legal obligations and communicate with you about your account or service.

We may use website analytics and operational information to understand and improve the performance and reliability of SendTheCV, subject to applicable law and consent requirements.

12Legal Basis and User Authorization

Where applicable law requires a legal basis for processing, we process information as necessary to provide the service you request, to comply with legal obligations, on the basis of legitimate interests where permitted, or with your consent where consent is required.

Connecting an external email account and approving the provider's consent screen is your authorization for SendTheCV to use the approved permissions for the disclosed functionality. You can revoke that authorization.

13Sharing With CV Recipients

CV distribution necessarily involves sharing the CV and information contained in it with the employers, recruiters and other recruitment-related recipients to whom the CV is distributed at your instruction.

Those recipients are independent third parties. After receiving your CV, they may process it under their own privacy obligations and retention practices.

14Service Providers

We may use service providers for functions such as cloud hosting, infrastructure, email connectivity, authentication, payment processing, analytics, security, monitoring and customer support.

Service providers receive access only to information reasonably necessary for the service they provide and are expected to handle information under appropriate contractual, confidentiality, security and legal obligations.

We do not permit a service provider to use connected Google or Microsoft user data for its own unrelated advertising or marketing purposes.

15Legal Disclosures and Business Changes

We may disclose information where required by applicable law, court order or competent authority, or where reasonably necessary to protect users, investigate fraud, abuse or security threats, or defend legal rights.

If the business is involved in a merger, acquisition, restructuring or sale of assets, information may be transferred as permitted by applicable law and applicable provider policies. Where prior consent is required for a particular category of provider data, we will obtain it before such transfer.

16Data Storage and International Processing

SendTheCV and its service providers may process information using infrastructure located in different countries. Where personal information is transferred internationally, we take steps required by applicable law for the transfer and protection of that information.

Connected Google or Microsoft data remains subject to the restrictions and commitments described in this Privacy Policy regardless of processing location.

17Security

We use reasonable administrative, organizational and technical measures designed to protect personal information and connected-account data against unauthorized access, alteration, loss, misuse or disclosure.

Measures may include access controls, authentication controls, secure transmission, logging, monitoring and restrictions on personnel access. No internet service can guarantee absolute security.

18Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide the Service, maintain legitimate business and transaction records, resolve disputes, prevent fraud and meet legal obligations.

Connected email content and metadata are retained only to the extent needed for the connected feature, service records, security or legal requirements. Retention periods may differ depending on the type of data and the feature used.

OAuth tokens are retained while the connection remains authorized and as technically necessary to provide the connected service. When access is revoked or the connection is removed, tokens are deleted or rendered unusable in accordance with our technical processes, subject to any limited retention required for security or legal reasons.

19Account Disconnection, Revocation and Deletion

You may disconnect your email account through SendTheCV where this functionality is available. You can also revoke SendTheCV's access directly through your Google Account or Microsoft account settings.

After revocation, SendTheCV will no longer use the revoked authorization to access your mailbox. Connected features may stop working.

You may request deletion of eligible personal information held by SendTheCV by contacting us at the privacy contact listed below. We may need to retain limited information where required by law, for transaction records, fraud prevention, security or the establishment or defense of legal claims.

Deleting information from SendTheCV cannot automatically delete a CV that was already distributed to an independent employer or recruiter at your instruction.

20Your Privacy Rights

Depending on the law that applies to you, you may have rights to request access to personal information, correct inaccurate information, request deletion, restrict or object to certain processing, withdraw consent where processing relies on consent, or request other rights provided by law.

We may need to verify your identity before completing a privacy request.

21Cookies and Website Technologies

SendTheCV may use cookies and similar technologies needed for login, security, preferences, analytics and website operation. Where applicable law requires consent for non-essential cookies, we will provide the required choice.

22Payment Information

Payments may be processed by third-party payment providers. Where card information is entered directly with a payment provider, SendTheCV may receive transaction details such as payment status, amount, reference and billing information without receiving your complete card number.

23Children's Privacy

SendTheCV is intended for people who are legally able to use a CV distribution service for employment purposes. We do not knowingly seek to collect children's personal information contrary to applicable law.

24Third-Party Websites and Recipients

SendTheCV may interact with independent services and recipients. Their handling of information is governed by their own privacy practices. This policy applies to information controlled or processed by SendTheCV, not to independent processing carried out by an employer, recruiter, Google, Microsoft, payment provider or other third party under its own responsibility.

25Changes to This Privacy Policy

We may update this Privacy Policy when our CV distribution service, email integrations, data practices, provider requirements or legal obligations change.

The latest version will be published on SendTheCV.com with its effective date. Where required, we will provide notice of material changes.

26Google API Limited Use Disclosure

SendTheCV's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This commitment applies to Google user data accessed through SendTheCV's Google integration.

27Contact and Data Controller

§Legal Information

SendTheCV.com is operated by DW Talent Services FZE, a Free Zone Establishment licensed by Sharjah Publishing City – Free Zone Authority under Licence No. 4430189.01 (Formation No. 4430189), with registered address at Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.