In short
Your CV holds some of the most personal details you own. This page explains, in plain words, what protects them on Tabhar today: how your data travels and is stored, how it is kept apart from everyone else’s, how our own team is held to a higher bar, and how to tell us if you find a problem.
Encrypted connections and storage
- Every connection to tabhar.com is encrypted (HTTPS), and your browser is told to use only encrypted connections with us.
- Your account and your documents are stored by our database provider on servers that encrypt the data at rest.
Your data is walled off from everyone else’s
- The database itself checks every request: a signed-in person can read and change only their own CVs, cover letters and settings. Another account cannot reach them, even by guessing an address.
- A link you share — a CV link or a business card — shows only what you chose to share, and you can turn it off at any time.
Two-step verification for our team
- Every Tabhar administrator must sign in with a password AND a one-time code from an authenticator app. A password alone never opens the admin tools.
- Actions our team takes on an account are recorded.
A strict content-security policy
Our pages tell your browser exactly which scripts may run and where it may send data. Anything else is blocked, which makes it much harder for code injected into a page to run or to send your information elsewhere.
Payments
Payments are handled by our payment provider, which is the merchant of record. You enter your card details on its checkout page, so they never reach our servers: Tabhar never sees or stores your card number. You can read more in our Refund & Cancellation Policy.
Where your data is stored
- Today our database and our application servers are in Tokyo, Japan.
- Pages and files may be delivered to you from our hosting provider’s network location nearest to you.
- When you use an AI feature, the text it needs is sent to our AI provider to produce the answer, and it is not used to train AI models. The emails we send you go through our email provider.
How to report a security problem
- If you believe you have found a security problem, email us at support@tabhar.com and write “Security” in the subject. Our security contact is also published in our security.txt file (tabhar.com/.well-known/security.txt).
- Please tell us what you found and how to see it, and give us time to fix it before you share it with anyone. Do not access or change other people’s data, and do not run tests that could slow the service down for others.
- We read every report and reply to you.
Independent security testing
We plan to have our security tested by an independent firm. We will say so on this page once it has been done. We do not claim any results today.
What you control
- You can download your CVs (PDF or Word) and your cover letters at any time.
- You can delete your account from Account settings. That deletes your account and every CV you have created; it cannot be undone.
- Anyone, with or without an account, can ask us to delete personal data on our “Request deletion of my data” page.