Privacy Policy

Learn how we collect, use, and protect your personal information

Last updated: 6/21/2026

This policy complies with Vietnam's Decree 13/2023/ND-CP on personal data protection and related legal regulations.

1. Information We Collect

1.1 Personal Information

Full name, email address, phone number
CV information: work experience, education, skills
Profile pictures and images in CV
Payment information (processed by PayOS)

1.2 Technical Data

IP address, browser information
System activity logs
AI embedding data to improve CV search
Cookies and session data

2. Legal Basis and Purpose of Data Processing

2.1 Legal Basis

We process your personal data based on the following legal bases under Decree 13/2023/ND-CP:

Data subject consent: When you register and use our services
Contract performance: Providing CV creation services and related features
Legitimate interests: Improving services and system security
Legal compliance: Storing data as required by law

2.2 Purpose of Processing

CV Creation & Management: Store and display your CV information
CV Search: Use AI to match CVs with job requirements
CV Sharing: Enable public CV sharing with recruiters
Auto-send: Automatically send CVs when suitable opportunities arise
Payment Processing: Handle premium service subscriptions
Service Improvement: Analyze and optimize user experience

3. Information Sharing

We only share your information in the following cases:

With recruiters: When you enable public CV or auto-send features
Service providers: PayOS for payments, Supabase for storage
Legal requests: When required by competent authorities
Protecting rights: To protect user rights and safety

4. Information Security

Data encryption during transmission (HTTPS/SSL)
Secure storage on Supabase with encryption
Multi-factor authentication and access control
Regular data backups
24/7 security monitoring

5. Storage Period

Account data: Until you delete your account
CV and related information: Until you delete the CV
System logs: 12 months
Payment data: According to legal regulations (5-7 years)

6. Data Subject Rights (under Decree 13/2023/ND-CP)

Under Decree 13/2023/ND-CP, you have the following rights regarding your personal data:

Right to be informed: About the processing of your personal data
Right to consent and withdraw consent: Allow or refuse data processing
Right to access: View personal information we have about you
Right to rectification: Update or correct inaccurate information
Right to erasure: Request deletion of account and personal data
Right to restriction: Temporarily suspend certain data processing activities
Right to data portability: Download or transfer personal data
Right to object: Disagree with data processing in certain cases
Right to complain: File complaints with competent authorities
Right to compensation: When rights are violated due to illegal data processing

Response time: We will respond to your requests within 72 hours or as required by Decree 13/2023/ND-CP.

7. Cookies and Tracking

We use cookies to improve your experience:

Essential cookies: To maintain login sessions
Functional cookies: Remember language preferences, theme
Analytics cookies: Understand website usage

8. Cross-border Data Transfer

Your personal data may be transferred and stored on servers located outside Vietnam through the following service providers:

Supabase: Store CV data and user information
PayOS: Process payments
Google OAuth: Authentication for login

Security commitment: This data transfer is conducted in compliance with Decree 13/2023/ND-CP and appropriate security measures are applied to protect your personal data.

9. Children Under 16

Under Decree 13/2023/ND-CP, FormCV is not intended for children under 16 years of age. We do not knowingly collect information from children under 16. If discovered, we will immediately delete such information and notify parents or guardians.

10. Policy Changes

We may update this policy over time to comply with new legal regulations or improve services. Significant changes will be notified via email or website notice at least 30 days before taking effect, in compliance with Decree 13/2023/ND-CP.

11. Contact and Complaints

11.1 Contact Us

If you have questions about this policy or wish to exercise your rights, please contact:

Email: contact@formcv.app

Address: Vietnam

Response time: Within 72 hours

11.2 Complaint to Government Authorities

Under Decree 13/2023/ND-CP, you have the right to file complaints with competent authorities:

Department of Information Security - Ministry of Information and Communications

Address: 18 Nguyen Du, Hai Ba Trung District, Hanoi

Email: atasv@mic.gov.vn

Phone: (024) 8944 6911

Note: We encourage you to contact us directly before filing a complaint with government authorities so we have the opportunity to resolve the issue quickly.