Privacy Policy
Effective Date: October 2026 • Applicable Law: Nigeria Data Protection Act (NDPA) 2023 • Version 2.1
CoreCV Privacy Commitment (At a Glance)
1. Scope & Two-Sided Platform Architecture
CoreCV Technologies ("CoreCV", "we", "us", or "our") operates a two-sided Career Intelligence Platform connecting:
Professionals across all industries who compile their authentic work, projects, verified evidence, and career history into a persistent Master Vault.
Founders, hiring managers, and talent acquisition teams seeking to identify verified candidate capabilities backed by proof rather than self-reported resume claims.
This Privacy Policy applies equally to candidates, recruiters, waitlist participants, and site visitors.
2. Information We Collect
We collect information directly from you when you register, request early access, or build your Master Vault:
A. Candidate Information
- Identity & Account: Full name, primary email address, authentication credentials, and OAuth tokens (Google / LinkedIn).
- Career & Evidence Records: Profession, work experience, responsibilities, STAR stories, outcome metrics, and uploaded resumes (PDF / DOCX).
- Work Artifacts & Proof: Public repository URLs (e.g. GitHub), live deployment URLs, published case studies, architecture briefs, and portfolio links you explicitly connect.
- Optional Contact Information: Direct phone or WhatsApp number provided during early access registration or onboarding.
B. Recruiter & Hiring Team Information
- Representative Identity: Full name, work email address, and official organizational title or role (e.g. Founder, CTO, HR, Hiring Manager).
- Company Details: Company or organization name, website domain, and industry domain.
- Hiring Needs: Open positions, technical capabilities, experience levels, and talent criteria submitted.
- Direct Contact: Optional phone or WhatsApp number submitted for priority walkthroughs and candidate introductions.
C. Technical & Security Telemetry
IP addresses, browser type, operating system, and essential authentication cookies required to maintain encrypted session security and prevent CSRF attacks.
3. Strict Phone & WhatsApp Privacy Shield
When you optionally provide your telephone or WhatsApp contact number to CoreCV, we enforce a strict protective protocol:
Our Guarantee: Zero Public Phone Exposure • Zero Spam • Zero Resale
- Never Publicly Displayed: Your direct phone number is never shown on public profiles, discovery engines, or external storefronts.
- Strict Internal Use: Used exclusively by CoreCV’s founding team to send high-priority onboarding updates, account security notices, or to coordinate verified candidate-recruiter introductions upon mutual consent.
- Zero Third-Party Sharing: We do not sell, rent, or lease phone numbers to recruiters, third-party marketing brokers, or advertising networks under any circumstances.
4. Documented Evidence vs. Sensitive Personal Data
CoreCV is built around **verifiable professional capability**. We make a strict distinction between professional evidence and sensitive private data:
- Professional Proof: Repositories, deployed systems, published articles, and outcome metrics that you explicitly link are processed to verify capabilities and match you with relevant hiring teams.
- Exclusion of Sensitive PII: CoreCV does not request, index, or store government national identification numbers (e.g. NIN, SSN, BVN), personal residential addresses, financial account details, or sensitive personal demographic data.
5. Artificial Intelligence & Zero-Model-Training Guarantee
CoreCV utilizes enterprise AI models (such as Google Gemini via the Vercel AI SDK) for intelligent structuring, STAR story refinement, and capability matching:
Enterprise Data Isolation: All AI interactions occur via secure, encrypted TLS 1.3 connections under strict enterprise API terms.
Under our enterprise API agreements, your career records, Master Vault contents, interview notes, and recruiter inquiries are NOT stored by foundation LLM providers and are NEVER used to train public or commercial AI models.
6. Recruiter Search & Discovery Governance
To protect candidate privacy and maintain executive trust across the platform:
- Candidate Privacy Controls: Candidates can choose whether their Master Vault is visible for recruiter capability discovery or kept strictly private for personal job application tailoring.
- Recruiter Vetting: All hiring organizations undergo verification before receiving access to candidate evidence records.
- Confidentiality of Hiring Intel: Search parameters, team size, and role requirements entered by recruiters are treated as strictly confidential proprietary information.
7. Lawful Basis for Processing (NDPA 2023)
In strict accordance with the **Nigeria Data Protection Act (NDPA) 2023**, CoreCV processes personal data under the following legal bases:
Contractual Necessity
Processing Master Vault data, generating applications, and facilitating hiring partner introductions requested by you.
Explicit Consent
Voluntarily joining the waitlist, connecting external OAuth accounts, or opting in to recruiter talent discovery.
8. Your Legal Rights & Permanent Erasure
Under the Nigeria Data Protection Act 2023 and international data privacy frameworks (including GDPR), you retain the following enforceable rights:
- Right of Access & Portability: Request a complete structured export of your Master Vault data at any time.
- Right to Rectification: Edit, update, or correct any career record or recruiter contact detail instantly in your dashboard.
- Right to Erasure (Right to be Forgotten): Permanently delete your account and all associated vault records from our database.
- Right to Withdraw Consent: Unsubscribe from marketing updates or pause recruiter discovery at any moment without penalty.
To exercise your data privacy rights, email our Data Protection Officer at privacy@corecv.app. All data deletion requests are permanently executed within 7 business days.
9. Contact Data Protection Office
For legal inquiries, data rights execution, or regulatory questions under the Nigeria Data Protection Commission (NDPC):
CoreCV Data Protection Office
CoreCV Technologies, Ibadan, Oyo State, Nigeria
Direct Email: privacy@corecv.app / legal@corecv.app