SoftDocs is the data controller for the personal data described in this policy. You can contact us at help@ke.softdocs.org.
1. Information We Collect
- CV content: contact details, location, work and education history, skills, references, and instructions you submit.
- Order records: payment reference, package, amount, referral attribution, and transaction date. Paystack processes your payment details; SoftDocs does not receive your full card or M-PESA credentials.
- Technical information: basic device, page, and performance information produced when you use the service.
2. How We Use Your Information
We process this information to:
- provide previews and generate the documents you request;
- initialize, verify, reconcile, and support payments;
- provide secure redownload and short-term recovery;
- prevent fraud, secure the platform, and diagnose failures; and
- understand aggregate product usage and improve reliability.
Our main lawful bases are performance of our contract with you, compliance with legal obligations, and our legitimate interests in securing and improving the service. We do not use your CV to train a SoftDocs model or sell your personal data.
3. Where Your Data Goes
We use service providers only where needed to operate SoftDocs: Paystack for payments, Supabase for database and temporary file storage, Vercel for hosting and product analytics, and an AI service accessed through an AI gateway for paid rewriting features. These providers process data under their own security and contractual controls.
Product analytics records coarse events such as mode selection, checkout start, payment completion, and generation success. We do not send CV text, names, email addresses, phone numbers, locations, or payment references in those events. AI operations telemetry records only the task, model, token counts, duration, estimated cost, and success status.
Some providers may process data outside Kenya. Where personal data is transferred internationally, we require an appropriate legal basis and safeguards consistent with Kenya's Data Protection Act. Do not include information that is unnecessary for a job application.
4. Storage and Retention
- Your editable draft and local order history stay in your browser until you clear site data.
- Submitted CV content is processed to create your documents. The generated PDF or ZIP is kept in private storage for up to 24 hours, then scheduled for deletion.
- Content-free AI operations metrics are retained for up to six months for reliability and cost analysis. Product analytics follow the configured analytics-provider retention policy.
- Minimal transaction records are retained for support, fraud prevention, accounting, and the period required by applicable law. The sales ledger does not retain your CV or phone number.
- Service providers may retain limited records under their own legal and compliance obligations.
5. Security
We use private storage, short-lived download links, access controls, request validation, and transport encryption. No system is completely secure, so please keep payment reference codes private and contact us promptly if you believe one has been exposed.
6. Your Choices and Rights
Subject to applicable law, you may ask to be informed about our processing, access or correct your personal data, object or request restriction, request deletion, and obtain portable data. You may clear browser site data at any time to remove your local draft. To exercise a right, email us and include enough information to verify the request without sending a full CV unnecessarily.
7. Other People's Information
If you provide referee or other third-party details, you are responsible for having authority to use them for your CV. SoftDocs is not intended for children to use without appropriate parent or guardian involvement.
8. Questions and Complaints
Contact help@ke.softdocs.org first so we can help. You also have the right to raise a complaint with Kenya's Office of the Data Protection Commissioner.