Andiova Privacy Policy

Andiova ("we", "us", or "our") operates an online platform that provides smart tools for work, including CV building, invoice generation, converters and other utilities (collectively, the "Service"). We are committed to protecting your privacy and handling your personal data in a transparent and lawful way.

This Privacy Policy explains what information we collect, how we use it, the third-party services we rely on, and the choices you have regarding your data.

1. Information We Collect

We collect the following categories of information when you use Andiova:

• Account information: When you sign in (including via Google OAuth), we receive your name, email address and profile image (if available).
• CV data: Information you enter into the CV builder, including personal details, education, work history, skills, projects, achievements and any other content you choose to include in your CV.
• Invoice and business data: Information you enter into the invoice generator, such as your business name, address, customer details, line items and amounts.
• Payment information: We do not store your full card details. Payments are processed by Paystack, which may collect your card number, expiry date and other payment data in accordance with its own privacy policy.
• Usage data: Log data about how you use the Service, including IP address, browser/device information, pages visited, time spent and interactions with our tools. This may be collected via our hosting provider and analytics tools.
• Support and contact data: When you contact us (for example via the contact form or email), we collect the information you provide so we can respond.
• Cookies and similar technologies: We use cookies and similar technologies to keep you signed in, remember your preferences and measure how the Service is used. See the Cookies section below for more details.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your Andiova account.
• To provide, maintain and improve our CV builder, invoice generator and other tools.
• To tailor CV suggestions and AI-generated content based on the job descriptions and information you provide.
• To process payments and deliver digital downloads using Paystack.
• To secure the Service, prevent fraud and monitor for abuse.
• To respond to your requests, support tickets and feedback.
• To comply with legal obligations and enforce our Terms of Service.

3. Third-Party Services We Use

We rely on several third-party providers to operate Andiova. These providers process data on our behalf in accordance with their own privacy policies:

• Google OAuth: Used for secure sign-in with your Google account. We receive your basic profile information (such as name and email) from Google.
• Paystack: Used to process payments for paid tools (such as CV downloads or invoices). Paystack handles your card details directly.
• MongoDB: Used as our primary database to store account data, CVs, invoices and other records.
• Groq AI: Used to power some AI-based features, such as generating CV suggestions from job descriptions and your input. Relevant text that you provide may be sent to Groq for processing.
• Vercel: Used to host the Andiova web application and some static assets.
• Email providers and analytics tools: Used to send transactional emails and understand aggregate usage of the Service.

We do not sell your personal data to third parties.

4. Data Storage and Security

Your data is stored in secure databases hosted by our providers (for example MongoDB and Vercel). We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse, including:

• Using HTTPS to encrypt data in transit.
• Restricting access to production systems.
• Using environment variables and secrets management for API keys and credentials.

However, no method of transmission or storage is completely secure. You use Andiova at your own risk and should keep your login details confidential.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. We may also retain some information for a reasonable period to comply with legal obligations, resolve disputes and enforce our agreements. If you delete your account, we will remove or anonymise your personal data, subject to any legal requirements to retain certain records.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and associated data.
• Request a copy (export) of your CV data and other content you have provided.
• Object to or restrict certain types of processing, where applicable.

To exercise any of these rights, please contact us at privacy@andiova.com. We may need to verify your identity before fulfilling your request.

7. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences and understand how our tools are used. Cookies are small text files stored on your device.

• Essential cookies: Needed for core functionality, such as authentication and security.
• Preference cookies: Used to remember settings such as theme and localisation.
• Analytics cookies: Used to understand aggregate usage and improve the Service.

You can control cookies through your browser settings, but disabling certain cookies may affect how the Service functions.

8. Children's Privacy

Andiova is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal information, please contact us and we will take appropriate steps to remove such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of Andiova after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at privacy@andiova.com.