Privacy Policy
NextMoveCV.com (“Next Move CV”, “we”, “us”, or “our”) is operated by Md. Naimul Hoque, a sole trader based in Chittagong, Bangladesh.
This Privacy Policy explains what personal data we collect when you use nextmovecv.com (the “Service”), why we collect it, how we use and protect it, and what rights you have over it. We have written this in plain English because we believe you deserve to actually understand it.
Short version: NextMoveCV is a free AI-powered CV builder. We do not sell your data. We do not share it with advertisers. Your CV content is processed to generate your document and is not stored permanently on our servers beyond what is technically necessary.
Contents
- Who We Are
- Data We Collect
- How We Use Your Data
- Legal Basis for Processing
- AI Processing & Third Parties
- Cookies & Analytics
- Data Retention
- Data Security
- International Transfers
- Your Rights
- Children’s Privacy
- Changes to This Policy
- Contact Us
01 / 13
Who We Are
Controller: Hafez Md. Naimul Hoque (trading as ZOLVEQ)
Website: nextmovecv.com
Address: Chittagong, Chittagong, Bangladesh, 4330
As a sole trader based in the UAE, this policy is governed by the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL). Where users access the Service from the European Economic Area (EEA), we also apply relevant GDPR principles as a matter of good practice.
02 / 13
Data We Collect
We collect only what is necessary for the Service to work. Here is an honest breakdown:
| Category | Examples | How Collected | Required? |
|---|---|---|---|
| CV Content | Name, work history, skills, education, contact details you enter into the CV builder | You type it directly | Yes — core function |
| Account Data | Email address, password (hashed), display name — if you register | Registration form | Optional |
| Usage Data | Pages visited, template selected, browser type, IP address, session duration | Automatically via server logs & analytics | Automatic |
| Device Data | Browser, operating system, screen resolution, language | Automatically | Automatic |
| Communications | Messages you send us via contact form or email | You send it | Optional |
Sensitive data: Please do not include sensitive personal information in your CV that is not relevant to your job application — such as national ID numbers, passport numbers, bank details, or medical information. We are not designed to handle such data securely, and you do not need to include it for the Service to work.
03 / 13
How We Use Your Data
We use your data only for the purposes described below. We do not use it for advertising, do not sell it, and do not share it with third parties for their own marketing purposes.
- CV Generation: Your entered data is processed by our AI system to produce a formatted CV document in your chosen template.
- Service Operation: To allow you to save, download, and manage your CVs if you have an account.
- Service Improvement: Anonymised usage patterns help us understand which templates are popular and where users encounter difficulties.
- Security & Fraud Prevention: To detect and prevent abuse, automated attacks, or misuse of the Service.
- Legal Compliance: To comply with applicable UAE law and any lawful governmental requests.
- Communications: To respond to enquiries you send us. We do not send unsolicited marketing emails unless you have explicitly opted in.
04 / 13
Legal Basis for Processing
Under UAE PDPL and applicable international standards, we rely on the following legal bases:
- Performance of a contract / delivery of service — Processing your CV content to generate and deliver your CV document.
- Legitimate interests — Maintaining security, preventing abuse, and improving the Service, where these interests are not overridden by your rights.
- Consent — For any optional communications or non-essential cookies, where we ask for your consent separately.
- Legal obligation — Where UAE law requires us to retain or disclose data.
05 / 13
AI Processing & Third-Party Services
NextMoveCV uses AI to generate and enhance CV content. We are transparent about which third-party systems process your data:
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| OpenAI / AI Provider | AI-powered CV content generation and suggestions | CV content you enter | USA (adequate protections apply) |
| Hostinger / Web Host | Website hosting and server infrastructure | Server logs, IP addresses | EU / Lithuania |
| Google Analytics (if active) | Anonymised usage analytics | Anonymised usage data, IP (anonymised) | USA |
| WordPress / Elementor | Site platform and page builder | Technical site data | USA / EU |
Important: AI providers such as OpenAI may process your CV content on their servers under their own privacy policies. We recommend not including sensitive personal data such as passport numbers or financial details in your CV content. We select providers that offer data processing agreements and appropriate safeguards.
We do not use your data to train AI models. We will explicitly state it and seek your consent if this ever changes.
06 / 13
Cookies & Analytics
We use cookies and similar technologies. Here is what each type does:
| Type | Purpose | Can You Opt Out? |
|---|---|---|
| Essential | Login session, CSRF security tokens, language preference | No — required for site to work |
| Analytics | Anonymised page views, traffic sources (Google Analytics) | Yes — via cookie banner |
| Functional | Remembering your selected CV template | Yes |
You can control cookies through your browser settings at any time. Disabling non-essential cookies will not prevent you from using the CV builder.
07 / 13
Data Retention
- CV Content (guest users): Processed in-session to generate your CV. Not stored on our servers after your session ends unless you save it to an account.
- CV Content (registered users): Stored until you delete your account or request deletion, whichever comes first.
- Account Data: Retained for the lifetime of your account, plus 30 days after deletion to allow recovery.
- Server Logs: Retained for up to 90 days for security purposes, then deleted.
- Support Communications: Retained for up to 2 years from the date of last correspondence.
When retention periods expire, data is securely deleted or anonymised. We do not hold data “just in case”.
08 / 13
Data Security
We take reasonable technical and organisational measures to protect your data, including:
- HTTPS encryption across the entire site (TLS 1.2 or higher)
- Hashed and salted password storage — we never store passwords in plain text
- Access controls limiting who within ZOLVEQ can access personal data
- Regular software and plugin updates to address security vulnerabilities
Honest caveat: No system is 100% secure. While we take security seriously, we cannot guarantee absolute security over the internet. If we become aware of a data breach that affects you, we will notify you promptly in accordance with UAE PDPL requirements.
09 / 13
International Transfers
We are based in the UAE. Some of our third-party providers (such as AI and analytics services) process data in the United States or European Union. Where data is transferred outside the UAE, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) with processors
- Using providers that maintain SOC 2 or ISO 27001 certification
- Selecting providers in jurisdictions recognised as adequate by UAE authorities where possible
10 / 13
Your Rights
Under UAE PDPL and applicable law, you have the following rights regarding your personal data. To exercise any of these, contact us at privacy@nextmovecv.com.
| Right | What It Means | How to Exercise |
|---|---|---|
| Access | Request a copy of the personal data we hold about you | Email us |
| Correction | Ask us to correct inaccurate or incomplete data | Account settings or email us |
| Deletion | Request deletion of your personal data (“right to be forgotten”) | Account settings or email us |
| Restriction | Ask us to stop certain processing while a dispute is resolved | Email us |
| Portability | Receive your data in a machine-readable format | Email us |
| Objection | Object to processing based on legitimate interests | Email us |
| Withdraw Consent | Withdraw consent for optional processing at any time | Email us or cookie settings |
We will respond to requests within 30 days. We may ask you to verify your identity before processing requests. There is no fee for exercising your rights.
UAE Residents: You may also raise complaints with the UAE Data Office if you believe we have processed your data unlawfully. Visit dataoffice.ae for details.
11 / 13
Children’s Privacy
Next Move CV is intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.
12 / 13
Changes to This Policy
We may update this Privacy Policy from time to time as the Service evolves or as legal requirements change. When we make material changes, we will:
- Update the “Last updated” date at the top of this page
- Display a notice on the website for at least 14 days
- Notify registered users by email where the change significantly affects their rights
Your continued use of NextMoveCV after the effective date of a revised policy constitutes your acceptance of the changes.
13 / 13
Contact Us
If you have any questions about this Privacy Policy, want to exercise your rights, or have a concern about how we handle your data, please get in touch: