Privacy Policy

1. Information We Collect

Account Information

When you register, we collect your email address and (optionally) your name. If you sign in via a third-party OAuth provider (e.g., Google), we receive the profile data permitted by that provider.

Career and Resume Data

To provide the core Service, we store the career data you enter or upload: work history, skills, education, achievements, uploaded resume files (PDF, DOCX, TXT), and job descriptions you paste or scrape. This data is stored in your account until you delete it.

Usage Data

We collect standard server logs including IP address, browser type, pages visited, and feature interactions. This data is used for security, debugging, and improving the Service.

Payment Information

We use a third-party payment processor (Stripe) to handle all transactions. We do not store your full credit card number. We receive only a payment token, last four digits, and billing details necessary for invoicing.

2. How We Use Your Information

• →Provide the Service: Your career data and job descriptions are processed by AI models to generate resumes, perform gap analysis, and produce coaching output.
• →Improve the Service: Aggregated, anonymized usage patterns help us prioritize features and fix bugs. We do not use your personal resume data for this purpose.
• →Communications: We send transactional emails (password reset, billing receipts, plan changes). With your consent, we may send product updates. You can opt out of marketing emails at any time.
• →Security and fraud prevention: Usage logs help us detect and prevent abuse, unauthorized access, and violations of our Terms of Service.
• →Legal compliance: We may process data where required by law, court order, or to protect our legal rights.

3. Data Storage and Security

All data is encrypted in transit using TLS and at rest using AES-256. We use industry-standard infrastructure with access controls, audit logging, and regular security reviews.

Despite these measures, no system is completely secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.

4. Data Sharing

We share data only in the following limited circumstances:

• →AI processing: Your career and job description data is sent to Anthropic's API to generate AI outputs. Anthropic's API data handling is governed by their privacy policy. Anthropic does not use API data to train their models.
• →Infrastructure providers: We use cloud hosting and database providers under data processing agreements that prohibit them from using your data for any purpose other than hosting the Service.
• →Payment processors: Stripe processes payment transactions. Your financial data is governed by Stripe's privacy policy.
• →Legal requirements: We may disclose data when compelled by valid legal process, or to protect the rights, property, or safety of ResumAI, our users, or the public.
• →Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5. AI and Model Training

6. Data Retention and Deletion

We retain your account data for as long as your account is active. If you delete your account, we permanently delete your career data, uploaded files, synthesis history, and personal information within 30 days, except where we are required by law to retain certain records (e.g., billing records for tax purposes, retained for up to 7 years).

You can delete your account and all associated data at any time from Settings → Account → Delete Account. Individual resume files and syntheses can be deleted from the dashboard without deleting your entire account.

7. Cookies

We use essential cookies to maintain your session and authentication state. We do not use third-party advertising cookies or cross-site tracking cookies.

We may use first-party analytics cookies to understand feature usage patterns. These are anonymized and not linked to your identity. You can disable cookies in your browser settings, though this may impair certain features of the Service.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• →Access: Request a copy of the personal data we hold about you.
• →Correction: Request correction of inaccurate or incomplete data.
• →Deletion: Request deletion of your personal data (see Section 6).
• →Portability: Request an export of your career data in a machine-readable format.
• →Objection / Restriction: Object to or request restriction of certain processing activities.
• →Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email privacy@getresumai.com. We will respond within 30 days. EU/EEA users may also lodge a complaint with their local data protection authority.

9. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from anyone under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly. Contact us at privacy@getresumai.com if you believe this has occurred.

10. International Transfers

The Service is operated from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) for transfers from the EU/EEA where required. By using the Service, you consent to this transfer where not covered by other mechanisms.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notice at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at: