Skip to content

Privacy Policy

Effective 2 October 2026

Contents
  1. 1Who we are
  2. 2What we collect
  3. 3How we use it
  4. 4AI tools and OpenAI
  5. 5Who we share it with
  6. 6International transfers
  7. 7How long we keep it
  8. 8Cookies and device storage
  9. 9Security
  10. 10Your rights and choices
  11. 11Children
  12. 12Changes to this policy
  13. 13Contact

This policy explains what personal information ZitTalent collects, why, who helps us process it, how long we keep it and the choices you have. We have written it in plain words.

1.Who we are

ZitTalent (zittalent.com) is a free career service operated by ZitAcademy. In this policy “ZitTalent”, “we” and “us” mean ZitAcademy acting for ZitTalent. We are responsible for (the “controller” of) your personal information.

Contact us at support@zittalent.com about anything in this policy, including requests to see, correct or delete your information.

2.What we collect

  • Account: your name, email address and password when you create an account. Your password is stored by our sign-in provider in scrambled (hashed) form; we never see it. If you sign in with Google, Google shares your name, email address and profile picture with us.
  • CVs and cover letters: what you create. Until you sign in and save, they stay only in your browser on your device. When you save them to your account, we store them, with any photo you add.
  • CV builder record: when you write a CV with our CV builder and when you download it, we keep a short record: your name, phone, email, the job title on your CV, your career level and field, the education on your CV (for example “BSc, Accounting”), your city and country, how many CVs you started and downloaded, and a random code for your browser. The estimated cost of the AI requests made from your browser is linked to that code, so we can see what the builder costs. It helps us see how many people the builder helps and improve it. For each CV we also keep one row with the same details, the design you chose, how many times you downloaded a PDF or Word file, and counts such as how many jobs and skills the CV has. The CV itself, its text and your photo are not stored in this record.
  • Professional profile: your headline, about text, experience, education, certificates, projects and pictures, skills, languages, links and any contact details you choose to add. It stays private until you publish it; then only the parts you choose to show are public.
  • Text you give our AI tools: the notes, CV text, job adverts and answers you type or upload into the AI CV writer, profile set-up, Job Match and Job Explainer (see section 4).
  • Uploaded files: when you upload a CV (Word, PDF or text), we read the text from it in memory to fill in the form. The file itself is not kept.
  • Usage limits: to keep the AI tools free and fair, we record when each tool is used, how much text was processed and an estimated cost. For visitors who are not signed in, this uses a code made from the network and browser that changes every day, not a name. Each AI request is also linked to the random code for your browser (or to your account) and its estimated cost. We do not record what you wrote.
  • Messages and chat: when you write to us through “Write to us” or the help chat, we keep the words you write, the assistant's answers, the subject, any screenshot you add, your name, how to reach you and a good time to call if you give them, the page you were on, the site language and the random code for your browser. If you are signed in, the conversation is linked to your account and your account email is saved with it so we can reply. A secret kept on your device lets you read our replies without an account. The same daily-changing code as the usage limits is used to stop spam.
  • Activity record: to find and fix problems and to see where people get stuck, we record short events: which step of the CV builder or the profile builder was reached, which tool was used, whether a picture upload or a download worked, and errors in your browser (a short technical message, with email addresses and phone numbers removed and links shortened to the page address). They carry the random code for your browser (or your account), the page, your kind of device (phone, tablet or computer) and the site language, never what you wrote. If your browser sends Do Not Track or Global Privacy Control, we record no activity events from it. The CV builder record and the messages you send are still kept, because they are part of the service you asked for.
  • Technical information: like every website, our hosting provider receives information such as your IP address, browser type and the pages requested, and keeps short logs to run and protect the service.

We do not use advertising or tracking pixels. We count page views with Vercel Web Analytics and measure how fast pages load with Vercel Speed Insights. Neither sets cookies or identifies you: no IP address is stored, only visits, pages, countries and loading times are counted.

3.How we use it

  • To provide what you ask for: create and save your CVs and letters, build and publish your profile, and run the AI tools.
  • To keep the service safe and fair: prevent abuse, apply usage limits and fix problems.
  • To contact you about your account, for example to confirm your email or reset your password. We do not send marketing emails.
  • To read and answer the messages you send us, and to help you in the chat.

We never sell your personal information and never use it for advertising.

Where the law asks for a reason (legal basis), we rely on providing the service you asked for, on our legitimate interest in keeping it secure and fair, and on your consent when you choose to publish your profile. You can withdraw that consent at any time by unpublishing.

4.AI tools and OpenAI

Our AI features use OpenAI's API. When you use them, the text needed for your request (for example your notes, the CV text or the job advert you paste) is sent to OpenAI to produce your result.

We send requests with storage switched off. Under OpenAI's API data policy at the time of writing, content sent through the API is not used to train OpenAI's models, and OpenAI may keep it for up to 30 days to detect abuse before deleting it.

We do not keep the job adverts or CV text you paste into Job Match or Job Explainer. Their results stay only in your browser tab.

AI can make mistakes. Our tools are built to use only the facts you give and to remove anything they cannot find in your text, but always check the result before you use it.

The help chat's assistant uses OpenAI too: the messages you type there are sent to it to write an answer. It only knows how ZitTalent works and cannot see your account.

Please do not paste other people's personal information or sensitive details (such as ID numbers or health information) into the AI tools or the chat.

5.Who we share it with

We use a small number of service providers who process information for us under their own security and privacy commitments:

  • Supabase: database, sign-in and file storage (servers in the European Union, Ireland).
  • Vercel: hosting of the website.
  • OpenAI: AI processing (United States).
  • Google: only if you choose to sign in with Google.
  • Resend: delivery of sign-in emails, such as email confirmations and password resets.
  • Zoho: our support mailbox (support@zittalent.com), when you write to us.

Your published profile can be seen by anyone with the link, is listed on ZitTalent's Profiles page, and may be found through search engines. Drafts, unpublished profiles, saved CVs and letters are never public.

We may disclose information if the law requires it or to protect someone's safety, and we will tell you when we are allowed to.

If the operation of ZitTalent moves to another organisation, your information would move with it under this policy, and we would tell you first.

6.International transfers

Our providers store and process information outside Somaliland, mainly in the European Union and the United States. We choose providers that protect data with encryption and access controls.

7.How long we keep it

  • Account and profile: until you delete them or close your account.
  • Published profile: public until you unpublish it or close your account.
  • Saved CVs and letters: until you delete them or close your account.
  • AI usage records: up to 12 months, then deleted automatically.
  • Messages, chat conversations and screenshots: up to 12 months after the last message in the conversation, then deleted automatically.
  • Activity records: 90 days, then deleted automatically.
  • CV builder records: 24 months, then deleted automatically.
  • Job adverts and CV text pasted into the AI tools: not kept by us (see section 4).
  • Uploaded CV files: not kept.
  • Technical logs: kept by our hosting provider for a short time.

When you close your account, we delete your account data within 30 days. Copies in backups are overwritten on their normal schedule.

8.Cookies and device storage

We use only the cookies the site needs to work (no advertising or analytics cookies):

  • Sign-in cookies: keep you signed in (set by our sign-in provider).
  • NEXT_LOCALE: your language (1 year).
  • zt-cookies: remembers that you saw the cookie notice (1 year).
  • zt-install: remembers that you said “Not now” to installing the app (30 days).

Your browser's local storage keeps the CVs you are working on, your interview course progress, saved scholarships and similar settings on your device. If you install the app, your browser also keeps the site's public files so it opens quickly. You can clear all of this in your browser settings, or on our Cookie Policy page (zittalent.com/cookies), which lists every cookie and what it does.

9.Security

We protect your information with encrypted connections (HTTPS), database rules that let only you read your private data, private storage for the photos in your CVs and limited access by our team. Pictures on a published profile are public, like the profile itself. No system is perfectly secure; if a breach affects you, we will tell you without undue delay.

10.Your rights and choices

  • See and download: ask us for a copy of your information.
  • Correct: edit your profile and documents at any time, or ask us.
  • Delete: delete CVs and letters in My CVs, hide your profile from your dashboard, or email support@zittalent.com from your account's email address to close your account and delete everything.
  • Object or withdraw consent: unpublish your profile or stop using a feature at any time.

We answer within 30 days. If you are unhappy with our answer, you may complain to the data protection authority where you live.

11.Children

ZitTalent is for people aged 16 and over. We do not knowingly collect information from children under 16. If you believe a child has created an account, contact us and we will delete it.

12.Changes to this policy

We will update this page when our practices change and change the date at the top. If a change is important, we will tell account holders by email or on the site before it applies.

13.Contact

Email support@zittalent.com. ZitTalent is a service of ZitAcademy.