Privacy policy
Your resume contains personal information, so we collect as little as possible and use it only to run the service. This policy explains what we collect, why, who processes it on our behalf and the choices you have. Scalacy is responsible for your data when you use One Dollar CV.
1. What we collect
- Resume and cover letter content you type or upload, including your photo, so we can show, save and turn it into a PDF.
- Account details if you register: name, email and a securely hashed password, or your Google account email and name if you sign in with Google.
- Order details: the email for your receipt, amount, currency, payment method and the payment provider's reference. We never receive your full card number or wallet PIN.
- Messages you send through the contact form, with your name, email and optional phone number.
- Technical data: IP address and browser information, used for security, fraud prevention and rate limiting.
2. How we use it
- To provide the editor, save drafts, generate PDFs and let you download them again.
- To take payments, send receipts and retrieval codes, and handle refunds.
- To answer your questions and support requests.
- To keep the service secure: preventing abuse, fraud, scraping and unauthorised access.
3. Legal basis
We process your data to perform our contract with you (providing what you asked for), to meet legal obligations such as keeping payment records, and for our legitimate interest in keeping the service secure. Where we rely on consent, you can withdraw it at any time.
4. What we never do
We do not sell your data, share your resume with employers or recruiters, use it for advertising, or train AI models on it. We do not use advertising or cross-site tracking cookies.
5. Service providers
We use trusted providers who process data only on our instructions:
- Stripe: US-dollar card payments.
- PayFast: Pakistani-rupee payments (JazzCash, Easypaisa and local cards).
- Neon: secure database hosting.
- Hostinger: website hosting.
- Resend: sending receipts and replies by email.
- Google: optional "Continue with Google" sign-in, and the fonts used in your documents.
Some of these providers store data outside your country. They are required to protect it to an equivalent standard.
6. How long we keep it
- Guest documents are removed when you close the download page after buying, or when they are no longer linked to your browser.
- Account documents stay until you delete them or close your account.
- Purchased PDFs can be downloaded again for 7 days, after which the download link ends.
- Order records are kept as long as needed for accounting and legal obligations.
- Security logs are kept for up to 180 days.
7. Security
All traffic is encrypted with HTTPS. Passwords are hashed, download links are single-use and tied to your session, and administrator access requires two-factor authentication. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
8. Your rights
You can ask us to access, correct, export or delete your personal data, or object to how we use it. Signed-in users can edit their profile and delete documents at any time. For anything else, email ask@onedollarcv.com and we will respond within 30 days.
10. Children
The service is intended for people aged 16 and over. We do not knowingly collect data from younger children.
11. Changes
If we change this policy we will update the date at the top of this page. Significant changes will also be shown on the website.
Contact
Questions about this page? Write to ask@onedollarcv.com or use our contact form.
Scalacy
ONE DOLLAR CV, RAILWAY ROAD, NEAR BERI CHOWK, NANKANA SAHIB, PUNJAB 39100, Pakistan
ask@onedollarcv.com