AutoCVPrivacy policy
Last updated 8 October 2026
AutoCV helps people in Nigeria find jobs, build CVs and hire trusted local and online services, and helps businesses list services and hire staff (through the AutoCV and AutoCV Pro apps and autocv.com.ng). This policy explains what personal data we handle, why, who sees it and your rights under the Nigeria Data Protection Act 2023 (NDPA).
1. Who we are
AutoCV is the data controller. Contact our data protection team at privacy@autocv.com.ng.
2. What we collect
| Data | When |
|---|---|
| Phone number and name | When you sign in (we send a one-time code by SMS). |
| CV and career details: work history, education, skills, certificates, languages, salary expectations, work authorisation, photo | When you build a CV, upload one, or set up Auto Apply. |
| Location | When you allow it, to show jobs and services near you and distances. Businesses give their address so customers can find them. |
| Job applications | What you send employers: your CV, answers to their questions, notes. |
| Service requests | Your address (for home visits), answers, photos and files you attach, and quotes. |
| Messages | Chats with providers, customers, employers or applicants, and files sent in them. |
| Reviews and reports | Ratings and comments you post; reports you make. |
| Business details | Name, logo, photos, address, hours, services, prices, jobs, and CAC registration details and certificate if you ask to be verified. |
| Payments | Plan, amount and reference. Card and bank details are handled by Paystack or Squad; we never see or store full card numbers. |
| Device and usage | Push notification token, app version, device type, sign-in times, and server logs (IP address) for security. |
3. Why we use it, and our lawful basis
- To provide the service (contract): accounts, CVs, applications, requests, quotes, chat, notifications.
- With your consent: precise location, Auto Apply sending your CV and answers to employers on your behalf (including employers abroad), and marketing messages. You can withdraw consent at any time in the app.
- Legitimate interests: keeping AutoCV safe — detecting scams (for example employers asking applicants for fees), reviewing reports, preventing fake reviews and abuse, improving the product.
- Legal obligations: tax and accounting records, responding to lawful requests from authorities.
4. Who sees your data
- Employers you apply to (or Auto Apply applies to for you) see your application and CV. Once they invite you to interview, you see their phone number.
- Providers you send requests to see your request, answers and files; your phone number is shared only after you accept a quote (or if they allow calls and you call them).
- The other person in a chat sees your messages and files.
- The public sees business listings, jobs, prices, ratings and reviews. Reviews show your first name and initial only.
- Our service providers, under contract and only for our purposes: hosting, SMS delivery, Google Firebase (push notifications), Paystack and Squad (payments), and Anthropic (AI that drafts CVs, cover letters and screening answers from your own details).
- Authorities, when the law requires it.
We don't sell your personal data.
5. Transfers outside Nigeria
Some providers (Google, Anthropic) process data outside Nigeria, and Auto Apply's Global plan sends applications to employers abroad at your request. We rely on the safeguards in Part VIII of the NDPA — your consent, contracts that require adequate protection, and transfers needed to perform the service you asked for.
6. How long we keep it
- Your account data: until you delete your account.
- After deletion: your profile, CVs, files, chats, push tokens and Auto Apply data are deleted. Records other people rely on (a provider's request history, an employer's applicant list, a review's star rating) are kept anonymised — your name shows as "Deleted user" and your details are removed.
- Payment records: 6 years, as tax law requires.
- Security logs: up to 90 days. Reports about abuse: as long as needed to keep people safe.
7. Your rights
Under the NDPA you can ask to access, correct or delete your data, receive it in a portable format, object to or restrict processing, and withdraw consent. Most of this you can do in the app (edit your profile; delete your account). For anything else, email privacy@autocv.com.ng; we reply within 30 days. You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
8. Security
Data is encrypted in transit. Private files (CVs, request and chat files, certificates) are only reachable through short-lived signed links. Access to admin tools is limited and logged. No system is perfectly secure; we'll tell you and the NDPC about any breach that's likely to harm you, as the law requires.
9. Children
AutoCV is for people aged 18 and over.
10. Changes
We'll post changes here and tell you in the app before significant changes take effect.