Privacy Policy

Last updated: 12 October 2026

This is a translation; in case of conflict the Turkish version prevails.

This version takes effect on 24 September 2026 for new users and on 8 October 2026 for existing users. Rows about cookies apply to everyone from 28 September 2026 (Cookie Policy 4.5).

Çelik Yazılım ve Ticaret Limited Şirketi (brand: Cvisioner) is committed to protecting your privacy. This Privacy Policy explains how we collect, process, and protect your personal information when you use cvisioner.com, candidate.cvisioner.com, and partner.cvisioner.com.

For detailed legal disclosure under Turkish data protection law (KVKK), please refer to our KVKK Privacy Notice.

Update of 19 September 2026. Candidate profiles are now visible to employers on the platform by default (Section 4.1). Visibility can be switched off with a single tap under Profile → Preferences. In effect for all candidate accounts as of 20 September 2026.

Update of 29 September 2026. Şirketim, company following, internal opportunities, the process survey and the employer's ✦ status message draft were added (section 4.2 and Privacy Notice (KVKK) sections 5.1–5.5). These features are switched on at least 15 days after this update is published.

1. Data Controller

Çelik Yazılım ve Ticaret Limited Şirketi (brand: Cvisioner) MERSIS: 0240153782200001 · Çankaya Tax Office 2401537822 Address: Kızılırmak Mah. Dumlupınar Bulvarı Next Level No:3 A Kat:4 D.No:11 PK:06520 Çankaya, Ankara Email: support@cvisioner.com · Phone: +90 544 473 5632

2. Information We Collect

2.1. Information You Provide Directly

Identity and contact: Name, surname, email address, phone number
Account credentials: Username, encrypted password
Resume content: Work experience, education, skills, certifications, projects, languages, photo
Career preferences: Job title, city/country, experience level, work-model preference, job-search status, industry
Payment transaction data: Transaction reference number and billing details via PayTR (including the optional Turkish identity number or tax number for invoicing), subscription status and plan change records, the payment institution card token, the 1 TRY card verification transaction record, and payment approval records (date, amount, IP). Card numbers are not stored by us.

2.2. Automatically Collected Information

Security: IP address, browser type, OS, login/logout logs
Usage data: Pages visited, click events, session duration
Cookie data: See our Cookie Policy

2.3. AI-Generated Data

CV analysis results and scoring
AI-powered career recommendations
Job matching scores

3. How We Use Your Information

Purpose	Legal Basis
Account creation and management	Contract performance
CV analysis and career management services	Contract performance
Displaying your profile and CV to employers on the platform (talent pool)	Contract performance — you may switch it off at any time (Section 4.1)
Payment and invoicing	Contract performance / Legal obligation
Security and fraud prevention	Legitimate interest
Legal compliance	Legal obligation
Cookieless performance measurement	Legitimate interest
Analytics and advertising cookies; sign-up, payment and purchase notice to Meta	Legitimate interest; you can stop it with Decline in the banner
Masked session recording	Explicit consent (Accept in the cookie banner)
Service emails	Contract performance
Commercial electronic messages (campaigns, news)	Explicit consent and consent under art. 6 of Law no. 6563
Company following and new-job notifications	Performance of the contract — you can switch it off at any time
Internal opportunities (only if you switch it on)	Performance of the contract — you can switch it off at any time
Process survey (optional, stored separately from your identity)	Legitimate interest

The full table with KVKK article numbers is in Section 3 of the KVKK Disclosure.

We do not sell your personal information. Data may be shared in the following cases:

Employers on the platform (Cvisioner Partner accounts): While your talent-pool visibility is on, your profile and your CV with contact details removed are shown to employers — see Section 4.1
Companies you follow, work for or apply to: follower count (total only), your internal candidate details if you switched on internal opportunities, aggregate results of the process survey — details in Privacy Notice (KVKK) sections 5.2–5.4
Infrastructure and AI service providers: data storage, server management and AI APIs, solely for delivering the service. The full list of providers, the data each receives and their locations are in Section 4 of the KVKK Disclosure
Payment processor (PayTR): For payment verification and completion. When you consent to automatic renewal, your IP address is stored in encrypted form solely to be passed to the payment institution (PayTR) for renewal payments; it is deleted when automatic renewal is turned off.
Email and communication providers: For notifications and support correspondence
Legal requirement: Upon written request from competent public authorities or judicial bodies

4.1. Talent Pool — How Employers See You

Your candidate account is visible in the employers' talent pool by default; being found by employers is part of the service.

Shown: first and last name, profile photo, job title, city/country, experience level and years, skills, industry, work-model preference, job-search status; the summary, experience, education, project, skill, language and certification sections of your CV.
Not shown: email, phone, website and social media accounts are removed from the CV; your salary expectation is not shown. Your contact details are shared with an employer only when you accept that employer's offer.
Switching off: Profile → Preferences → "Talent pool visibility". You drop out of the listing the moment you switch it off; other services are unaffected. You are also asked about this preference on the first screen after sign-up.
If you started without an account: Until you save your account, your profile is not visible to employers.
Recommendation: do not add special-category data (health, disability, religion, union membership, criminal convictions) to your CV; Cvisioner does not request it. Bear in mind that your current employer may also be on the platform.

Employers may use this data solely for recruitment, within the Terms of Service and their own KVKK obligations; they may not transfer it outside the platform or share it with third parties.

4.2. Şirketim — Your Employer's Records

If your employer invites you to Şirketim and you join, your employer is the data controller for your work records; Cvisioner processes them on your employer's behalf. Your employer cannot see the applications you make to other companies or your job searches in your candidate account. Details are in Privacy Notice (KVKK) section 5.1.

5. Data Security

We implement the following technical and administrative measures:

Encryption in transit and at rest (TLS/AES-256)
Role-based access controls
Card data goes directly to PayTR; it never reaches our servers and is not stored

5.1. Error tracking and session recording

Error records (Sentry) do not depend on consent; they rely on legitimate interest in keeping the service working. Masked session recording runs only if you press Accept in the cookie banner (or save analytics under Preferences), never on payment pages, and all form fields and text are masked.

6. Data Retention

Data Category	Retention Period
Account, profile, CV and files	Permanently deleted 30 days after the deletion request
Session started without an account (CV, profile)	Permanently deleted after 30 days if you do not save your account
Payment and invoice records	10 years (Turkish Commercial Code art. 82, Tax Procedure Law art. 253)
Audit and security records	2 years (24 months for security records)
Commercial message consent and refusal records	At least 3 years after the consent ends
Talent pool visibility	While the preference is on; employer access ends the moment it is switched off
Follow record	Until you stop following or delete your account
Process survey answer	Separately from your identity; while the account of the company you answered about remains open

7. Your Rights

Under applicable law, you have the right to:

Access your personal data
Correct inaccurate information
Request deletion or destruction of your data
Object to automated processing that produces decisions affecting you
Request data portability
Withdraw consent at any time (without affecting prior processing)
Request compensation for damages arising from unlawful processing

How to exercise your rights: Submit a written request to support@cvisioner.com from your registered email address. Requests are responded to within 30 days.

8. Children's Privacy

You must be 18 or older to use the Platform, and you declare this during sign-up. We do not knowingly collect data from people under 18. If we learn of such collection, we delete the data.

9. International Data Transfers

Some of the providers we work with to deliver the service are located abroad. Which data goes to which provider, and where they are located, is listed one by one in Section 4.2 of the KVKK Disclosure. Transfers are made in accordance with KVKK art. 9 and the related Regulation.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated at least 15 days before they take effect via platform notification or email.