Privacy Policy

The controller responsible for processing personal data is PHI Studios, the majority shareholder, together with its partners in the context of the Djuman project. PHI Studios is a company established in Côte d'Ivoire.

For any questions regarding your personal data, you can contact us at [email protected].

When you use Djuman CV, we collect the following categories of data:

Account Data

• First and last name: to create your account and identify you
• Email address: for authentication and essential communications
• Password: stored in encrypted (hashed) form, never in plain text

Resume Data

• Professional information: work experience, education, skills, and other information you enter in your resume
• Profile photo: if you choose to add one to your resume

Technical Data

• Session data: authentication cookies required for the service to function

Referral Data

When you access the site through a referral (affiliate) link, we collect:

• Affiliate code: the identifier of the partner who referred you to our service
• IP address: for geographic detection (country) at the time of the click
• Country: determined from network headers (CDN), not precisely geolocated
• Browsing data: originating page (referrer) and browser type, collected only at the time of the click

Your personal data is used to:

• Provide the service: create your account, save, and generate your resumes
• Authentication: manage your login and secure your session
• PDF generation: convert your resume into a downloadable document
• AI assistance: improve the content of your resume through our artificial intelligence features (summary, grammar, translation, cover letter)
• Djumi chatbot: conversational assistance to fill in and improve your resume. Conversation messages are not stored on our servers: they remain only in your browser (session) and are erased when you close the tab. Only the number of messages sent is retained for quota management.
• Affiliate program: tracking sign-ups and payments originating from referral links in order to compensate our affiliate partners. Conversion data (sign-up, payment amount) is retained permanently for program tracking.
• Contact from our team: our team may call or write to you at the phone number or e-mail address shown in your CVs, to help you finish your CV or tell you about our offers. You can refuse at any time: tell us by e-mail or on WhatsApp, or by replying to our message, and we stop contacting you.

We never sell, rent, or share your personal data for advertising or commercial purposes.

Businesses that open a Studio create CVs for their clients. For those clients' data, the Studio is the data controller: it decides what it enters and how it is used. Djuman CV hosts and processes that data on its behalf, to provide the service, and makes no other use of it.

What a Studio records

• The Studio's data: business name, city, country and WhatsApp number (the Djuman CV team may contact you on it), the accounts that work in it with their role and the version of the Studio terms they accepted, credit purchases and movements, name-correction requests and the Studio's AI usage (for its limits)
• A client's file: first name, last name, WhatsApp number and the Studio's notes
• The client's CVs and letters: their content and photos, as for a personal CV
• Credit ledger: each credit used, with the client's name and the CV's title, so the Studio can follow its spending
• Team and journal: the invitations sent (email address and role, deleted 30 days after they are accepted, withdrawn or expire) and the Studio's journal: who did what and when, for example opening or deleting a client file, creating, activating, translating, sharing, delivering or printing a CV, asking for a name correction, buying credits, accepting the terms or changing the team. A line about a client carries their name and the CV's title; both are erased if their file is deleted at their request. The owner and the managers read the journal; it is kept as long as the Studio exists

A CV handed over by link, for example on WhatsApp, can be viewed by anyone who has that link, until the Studio turns sharing off, moves the CV to the trash or deletes the file.

A client exercises their rights (access, correction, deletion) with the Studio that prepared their CV. Deleting their file erases their CVs, letters, share links and files for good; the Studio's ledger and journal keep the amounts and dates, without their name. A client can also write to us at [email protected]: we pass the request on to the Studio concerned.

Files are kept until the Studio deletes them. A Studio with no activity is deleted with its owner's account; a Studio with activity is closed on request, on terms agreed with it.

The Studio receives by email the receipt of each purchase, normally a reminder a week before credits expire, and a notice when its balance gets low. A person invited to join a Studio receives an invitation email.

The Studio's rules are in the Studio terms.

We use Umami, an audience analytics tool self-hosted on our own servers in Germany. Umami allows us to understand how our service is used so we can improve it.

What we collect

• Pages visited: to understand usage journeys
• Country and browser language: to tailor our service to the relevant regions
• Device type and browser: to ensure compatibility
• Key actions: resume creation, PDF downloads, template selection (without personal data)

What we do not collect

• No cookies: Umami operates without any tracking cookies
• No personal data: no IP address stored, no fingerprinting, no unique identifier
• No cross-site tracking: your activity on other sites is never tracked

Audience data is hosted exclusively on our servers and is never shared with third parties.

Djuman CV uses functional cookies for authentication, the affiliate program, and remembering your display preferences. No advertising or third-party tracking cookies are used.

The referral cookie is set only when you click an affiliate link. It allows us to attribute your sign-up to the partner who referred you to our service. The appearance cookie (djuman-theme) remembers your choice of light, dark, or automatic theme for the dashboard and the resume editor. It contains no personal data and is never shared. Our audience analytics tool (Umami) operates entirely without cookies.

Your data is stored on secure servers. Profile photos are hosted via Cloudflare R2, and resume data is kept in an encrypted PostgreSQL database.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction.

Your personal data is retained for as long as your account is active. If you delete your account, all of your data (profile information, resumes, photos) will be deleted without delay, in accordance with our deletion policy. The account of the owner of a Studio with activity is deleted once the Studio is closed.

Exception: affiliate program conversion data (sign-up date, payment amounts) is retained in anonymized form after your account is deleted, for the purpose of tracking the referral program.

In accordance with applicable data protection regulations, you have the following rights:

• Right of access: obtain confirmation that your data is being processed and receive a copy of it
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your personal data
• Right to data portability: receive your data in a structured, readable format
• Right to object: object to the processing of your data in certain cases

To exercise your rights, send an email to [email protected]. We undertake to respond within 30 days.

We rely on third-party services to operate Djuman CV:

• Cloudflare: content delivery network (CDN), DDoS attack protection, DNS management, and SSL certificates. Cloudflare may process visitors' IP addresses as part of securing traffic
• Cloudflare R2: secure storage of profile photos
• OpenRouter: AI processing to improve CV content, import CVs and chat with the Djumi chatbot: the content concerned (the CV's text or the imported document) is sent to it, without any account identifier
• PawaPay: mobile money payments: the number used and the amount are processed by PawaPay and the operator
• Paddle: card payments, as reseller: Paddle processes payment and billing data

We reserve the right to modify this privacy policy at any time. In the event of a substantial change, we will notify you by email or through a notice on the site. The date of the last update is indicated at the top of this page.