Privacy Policy
This Privacy Policy explains how Dot Coms, Inc., as operator of Psychologist.CV, may collect, receive, use, retain, disclose, secure, and otherwise process information associated with the Service. It applies to the public website, account registration, CV and cover-letter builder, uploaded documents, PDF generation, public CV pages, sharing tools, analytics, security systems, and support communications. Psychologist.CV is designed to let users control the professional information they create and publish. A CV stored in an account is not automatically public. When a user chooses to publish a CV, the selected content becomes available at a public URL and may be viewed, indexed, cached, copied, or redistributed by third parties. This Policy describes categories of information that may be processed, why processing occurs, how information may be disclosed or retained, and rights that may apply under governing law. Actual practices depend on the features used, settings selected, browser and device configuration, service providers, and legal requirements.
1. Scope and responsible operator
Dot Coms, Inc. operates Psychologist.CV and generally determines the purposes and means of processing associated with the Service. Where privacy law uses terms such as controller, business, owner, or operator, those terms may describe Dot Coms, Inc. depending on the jurisdiction and activity. This Policy applies to visitors, registered users, recipients of shared CV links, persons who communicate with Client Assistance, and individuals whose technical identifiers are processed during ordinary operation. It does not govern independent websites or services that do not incorporate this Policy. Not every category described is collected from every person. Collection depends on whether a person browses public pages, registers, logs in, uploads a document, creates or publishes a CV, downloads a PDF, sends a share message, or requests support.
2. Account and identity information
When an account is created or maintained, information may include a name, email address, password credential, account identifier, account status, registration and login timestamps, verification records, settings, and security-related events. We use this information to establish and authenticate the account, provide requested features, communicate account or security information, prevent abuse, restore access, and maintain records reasonably necessary to administer the Service. Users must provide an email address they are authorized to use. The registered email address may be used for account confirmation, password recovery, security notices, service communications, and responses to user requests.
3. CV, cover-letter, and professional-profile content
Information entered into a CV or cover letter may include professional name, contact information, photograph, education, degrees, licenses, certifications, employment, clinical training, practicum, internship, postdoctoral experience, research, publications, presentations, teaching, supervision, awards, grants, memberships, volunteer activity, skills, and other information selected by the user. This content is processed to save drafts, populate templates, generate previews, create downloadable files, provide editing tools, and publish a page when the user chooses publication. Users decide what professional information to enter and should avoid unnecessary sensitive information. Psychologist.CV does not require a user to publish a home address, date of birth, Social Security number, financial information, patient information, or other highly sensitive data.
4. Uploaded files and document-import information
When a user uploads a supported document, we may receive the file, filename, file type, size, upload time, extracted text, structural elements, conversion output, and error information generated during processing. Uploaded files and extracted content are used to perform the requested import, populate editable fields, troubleshoot failures, maintain security, and provide the resulting document. Complex formatting or image-only content may not be imported accurately. Users must not upload patient records, psychotherapy notes, confidential clinical material, identity documents, financial records, privileged communications, or third-party content they are not authorized to process.
5. Public CV pages and information intentionally made public
A CV becomes publicly accessible only when the user invokes a publishing feature. The public page displays the information selected and saved for publication and may include a user-chosen URL or slug. Public CV content may be viewed without an account and may be collected by search engines, archives, employers, recruiters, institutions, automated tools, and other visitors. Search engines and third parties control their own indexing, caching, copying, and removal practices. Unpublishing or deleting a CV affects the version controlled by Psychologist.CV after processing is complete. It does not guarantee deletion of screenshots, downloads, emails, browser caches, search-engine caches, archives, or independent copies made before removal. Information a user intentionally publishes may be treated as publicly available under some laws. Users should review the public page and remove information they do not want broadly disclosed.
6. Sharing and recipient information
When a user shares a CV through the Service, information may include the recipient email address, sender identity, message content, CV link, sending time, delivery status, and technical records reasonably necessary to transmit and protect the communication. Recipient information is used to perform the user’s request, prevent abuse, diagnose delivery problems, protect email reputation, and document security or legal issues. It is not intended to create a marketing list for unrelated messages. Users are responsible for having an appropriate reason to contact a recipient and for not using sharing tools for spam, harassment, bulk solicitation, confidential clinical information, or unlawful communication.
7. Support, feedback, and legal communications
Information submitted through Client Assistance or another support channel may include name, email address, organization, account details, public URL, message content, attachments, screenshots, technical information, complaint details, and any other information the sender chooses to provide. Communications may be used to respond, investigate, troubleshoot, document decisions, protect rights, enforce policies, address security incidents, and comply with legal obligations. Do not send passwords, patient information, psychotherapy notes, government identifiers, payment-card information, or unnecessary sensitive information through general support channels.
8. Information collected automatically
Ordinary website operation may generate IP address, browser type and version, operating system, device category, language, time zone, approximate location derived from IP, referrer, requested URL, timestamps, response status, session identifiers, and network or hosting indicators. Usage information may include pages viewed, templates opened, buttons selected, navigation paths, public CV visits, download requests, session duration, feature interactions, and error events. Security information may include failed logins, rate-limit events, bot indicators, suspicious request patterns, header data, file-validation results, cookie or storage identifiers, and records reasonably necessary to detect, investigate, or prevent abuse.
9. Sources of information
Information may be obtained directly from users, automatically from browsers and devices, from uploaded documents, from recipients or support correspondents, from hosting and security providers, from analytics services, and from publicly available pages associated with the Service. Service providers may return delivery results, error reports, performance metrics, fraud indicators, security alerts, or aggregated usage information. We may also receive information from a rights holder, employer, institution, licensing body, law-enforcement agency, or other person reporting suspected misuse or inaccurate publication. We do not represent that every source is used for every user. The source depends on the interaction and the providers supporting that feature.
10. Purposes of processing
Information may be processed to provide account access, save documents, import files, render templates, generate PDFs, publish or unpublish CVs, transmit share messages, maintain settings, respond to support requests, and deliver requested pages. Information may also be used to secure accounts and infrastructure, detect fraud and abuse, enforce Terms, diagnose errors, maintain backups, measure performance, improve design, understand aggregate usage, protect legal claims, comply with law, and administer business operations. We may aggregate, de-identify, or pseudonymize information and use the resulting data for analytics, security, testing, reporting, capacity planning, product development, and operational purposes where permitted.
11. Legal bases where applicable
Where law requires a legal basis, processing may rely on performance of the user’s request or agreement, legitimate interests in operating and securing the Service, compliance with legal obligations, protection of rights and safety, consent, or another basis recognized by law. The applicable basis may differ by activity. For example, account and document processing may be necessary to provide requested features; security logging may be based on legitimate interests or legal obligations; and optional technologies may rely on consent where required. Where consent is the basis, consent may be withdrawn prospectively through available controls or a valid request. Withdrawal does not affect processing that was lawful before withdrawal and may limit features that depend on the information.
12. Cookies, local storage, and similar technologies
Cookies, local storage, session storage, tags, pixels, scripts, server logs, and comparable technologies may support authentication, session continuity, form protection, security, preferences, analytics, performance measurement, and embedded services. Some technologies are necessary for account access and core operation. Others may be optional or controlled through browser settings, consent tools, provider controls, or legally recognized preference signals where applicable. The Cookie Policy provides additional information about technology categories, duration, browser controls, third-party providers, and the effect of blocking or deleting storage.
13. Service providers and disclosures for operation
Information may be disclosed to providers that support hosting, storage, databases, email delivery, security, traffic measurement, analytics, file conversion, content delivery, error monitoring, backups, support, and other operational functions. Providers receive information according to the feature they perform and may maintain their own logs or act as independent controllers for certain activities. We may use contractual, technical, and organizational measures intended to limit processing to appropriate purposes where reasonably available. Information may also be disclosed to professional advisers, insurers, auditors, contractors, affiliates, successors, or authorities when reasonably necessary to operate the Service, comply with law, protect rights, investigate abuse, respond to legal process, or complete a corporate transaction.
14. Sale, sharing, advertising, and cross-site activity
Dot Coms, Inc. does not sell personal information for money as the ordinary business model of Psychologist.CV. The Service may display cross-promotional links, external service links, analytics, or embedded scripts that involve disclosure of technical information to a provider. Some privacy laws define “sale,” “sharing,” or targeted advertising more broadly than an exchange for money. Where a covered disclosure falls within such a definition and the law applies, required notices, opt-out mechanisms, or recognized browser signals will be addressed to the extent legally and technically required. A user-directed disclosure—such as publishing a CV, sending a CV to a recipient, or following an external link—is performed at the user’s direction and may be treated differently from sale or advertising disclosures under applicable law.
15. Independent websites, embedded resources, and public recipients
Links, fonts, scripts, widgets, support services, email providers, and other external resources may be operated independently. A third party may receive IP address, browser data, requested URL, referrer, and other technical information when its resource loads or when a user follows a link. Recipients of a shared CV and visitors to a public CV may use, store, copy, or disclose information under their own authority and policies. Psychologist.CV does not control how an employer, recruiter, institution, search engine, archive, or other third party handles information it obtains independently. Users should review relevant privacy notices before submitting information to an external service or making professional information public.
16. Sensitive information and protected health information
The Service is not designed to collect patient records, psychotherapy notes, treatment information, protected health information, substance-use-disorder records, or other clinical records. Users must not place identifiable patient or client information in CVs, uploads, support requests, or share messages. A CV may contain professional information that some laws classify as sensitive, such as a photograph, professional license number, demographic information, or membership information, but users control whether to provide or publish such details. We process user-selected content to provide the requested document and publication features. Use of Psychologist.CV does not automatically make Dot Coms, Inc. a HIPAA covered entity or business associate. A user’s professional status does not convert a general CV-building service into a clinical data system.
17. Children and minors
Psychologist.CV is intended for adults and is not directed to children under thirteen. Account creation is limited to persons who are at least eighteen and have legal capacity to accept the Terms. We do not knowingly seek personal information from children for account use. If we learn that a child’s information was submitted in violation of applicable law or the Terms, we may delete or restrict the account and associated information after reasonable verification. A parent or guardian may submit a concern through Client Assistance with enough information to identify the account or content at issue.
18. Data retention
Information is retained only as reasonably necessary for the purposes described, including account operation, document storage, publication, security, support, analytics, legal compliance, dispute resolution, fraud prevention, and enforcement. Retention varies by data type, account status, user actions, backup schedules, provider configuration, security needs, and legal obligations. Drafts and uploaded content may remain while the account or document is active; public content may remain until unpublished or deleted; logs may be retained for a reasonable security or operational period. Deletion from active systems may not immediately remove information from backups, archives, disaster-recovery media, immutable security logs, recipient systems, search-engine caches, or independent copies. Backup copies are isolated or overwritten according to ordinary schedules and are not restored for routine use after deletion unless necessary for recovery, security, or legal reasons.
19. Security safeguards
We use administrative, technical, and organizational measures reasonably designed to protect information, which may include access controls, authentication, encryption in transit, logging, monitoring, rate limiting, backups, patching, file validation, and provider controls. No transmission, storage system, authentication method, or online service is completely secure. We cannot guarantee that unauthorized access, loss, misuse, alteration, malware, provider failure, or other incidents will never occur. Users should maintain secure devices and email accounts, choose a strong unique password, avoid shared-device exposure, keep independent backups, and promptly report suspected compromise.
20. International processing and transfers
Psychologist.CV may be accessed internationally, while infrastructure, providers, personnel, or records may be located in the United States or other jurisdictions. Information may therefore be processed outside the country where a user is located. Privacy laws and government-access rules differ by jurisdiction. Where legally required, transfers may rely on contractual safeguards, adequacy mechanisms, consent, performance of a requested service, or another recognized basis. Users are responsible for determining whether publication or transfer of their professional information is lawful and professionally appropriate in their location.
21. General privacy rights
Depending on location and applicable law, a person may have rights to request access, correction, deletion, restriction, portability, objection, withdrawal of consent, information about processing, or review of certain automated decisions. Rights are not absolute. A request may be limited by identity-verification needs, security, legal privileges, record-retention duties, freedom of expression, public information, third-party rights, fraud prevention, technical limitations, contractual necessity, or statutory exceptions. Users can directly edit much of their account and CV information, unpublish a CV, or delete documents through available account controls. Requests concerning information not available through those controls may be submitted through Client Assistance.
22. California and other United States privacy rights
Where a United States state privacy law applies, residents may have rights to know or access personal information, correct inaccuracies, request deletion, obtain a portable copy, opt out of qualifying sale, sharing, targeted advertising, or certain profiling, limit specified uses of sensitive information, and receive equal treatment for exercising rights. Applicability depends on statutory thresholds, exemptions, the person’s residence, the type of information, and the role in which information is processed. Nothing in this Policy represents that every state law applies to Psychologist.CV or that every right applies to every request. A request may require reasonable verification. An authorized agent may be required to provide proof of authority and the individual may be asked to confirm the request. Appeals or additional review will be provided where required by applicable law.
23. European, United Kingdom, and similar rights
Where applicable, individuals may have rights of access, rectification, erasure, restriction, data portability, objection, withdrawal of consent, and complaint to a competent supervisory authority. Processing may rely on performance of a requested service, legitimate interests, consent, legal obligation, protection of rights, or another recognized basis. Individuals may object to processing based on legitimate interests and may object to direct marketing at any time where such processing occurs. The Service is not designed to make solely automated decisions that produce legal or similarly significant effects about a user. Automated formatting, import, security screening, and analytics are operational tools and do not determine licensure, employment, admission, or professional eligibility.
24. Do Not Track, Global Privacy Control, and browser signals
Browser “Do Not Track” signals are not implemented uniformly across the internet, and the Service may not respond to every nonstandard signal. Browser settings can still be used to block or delete cookies and limit certain technologies. Where applicable law requires recognition of a valid opt-out preference signal, such as Global Privacy Control, and the signal is technically detectable and relevant to covered processing, we may treat it as an opt-out request for the browser or device that sends it. A browser signal does not automatically unpublish a CV, delete an account, remove information from third parties, or identify the person behind a different device. Those actions require the relevant account control or a verified request.
25. Security incidents and breach response
We may investigate suspected unauthorized access, loss, misuse, malware, disclosure, or system compromise and may preserve logs, restrict accounts, reset credentials, notify providers, obtain professional assistance, or cooperate with authorities. When legally required, affected individuals or regulators will be notified in the manner and time prescribed by applicable law. Notification may be delayed where permitted to support investigation, restore security, prevent further harm, or comply with a lawful request. Users should promptly report suspected compromise through Client Assistance and should not include passwords or patient information in the report.
26. Corporate changes and business transfers
Information may be reviewed or transferred in connection with a merger, acquisition, financing, reorganization, asset sale, affiliate operation, insolvency, or other corporate transaction, subject to applicable law and reasonable confidentiality measures. A successor may continue processing under this Policy or provide notice of materially different practices. A transfer does not remove rights that cannot lawfully be waived. We may also reorganize service providers, infrastructure, or internal responsibilities without changing the purposes described in this Policy.
27. Changes to this Privacy Policy
We may update this Policy to reflect changes in features, information practices, providers, law, security, or business operations. The revised version will be posted on this page. Material changes may also be communicated through the website, account interface, or registered email address when reasonably appropriate or legally required. Continued use after an update means the revised Policy applies to subsequent processing to the extent permitted by law. Where consent is legally required for a new purpose, consent will be requested rather than inferred solely from continued use.
28. Submitting a privacy request
Privacy questions and requests may be submitted through Client Assistance. Describe the requested action and provide enough information to identify the relevant account, email address, document, or public URL. We may request reasonable verification before disclosing, correcting, deleting, or exporting information. Verification information will be used for the request and related security or legal records. Do not send passwords, patient records, psychotherapy notes, financial-account information, government identifiers, or unrelated sensitive material. We will respond within the period required by applicable law when a legally protected request applies.