resumecv.app ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
We comply with applicable data protection laws including GDPR (for European users) and CCPA (for California residents). If you have questions, contact us at privacy@resumecv.app.
When you register, we collect your name, email address, and a hashed password. You may optionally add profile information.
The content you enter into your resume — work history, education, skills, contact information, and profile photo — is stored to provide the Service. This is your data and you control it entirely.
We automatically collect information about how you use the Service, including pages visited, features used, session duration, and AI feature usage counts (for plan enforcement).
We do not store credit card numbers or payment details. Payments are processed by Polar.sh, which has its own privacy policy. We receive confirmation of payment status and plan type only.
We collect IP addresses, browser type, device type, operating system, and referring URLs for security, analytics, and service improvement purposes.
| Data Type | Why We Collect It | Stored |
|---|---|---|
| Email address | Account login, notifications | Indefinitely (until deletion) |
| Resume content | Core service functionality | Until you delete it |
| IP address | Security, fraud prevention | 30 days in logs |
| AI usage counts | Plan limit enforcement | Monthly, then reset |
| Payment status | Plan management | Indefinitely (for records) |
| Session cookies | Keeping you logged in | 30 days |
We use the data we collect to:
We do not use your data for advertising, sell it to third parties, or train AI models on your personal resume content.
We do not sell your personal data. We share data only with the following trusted service providers, strictly for operating the Service:
We may disclose your data if required by law, court order, or to protect the rights, property, or safety of resumecv.app, our users, or the public.
When you use AI features (bullet point generation, job match analysis, cover letters, etc.), the relevant content from your resume and/or the job description you paste is sent to OpenAI's API. Specifically:
We do not send your full resume to OpenAI unless you explicitly use an AI feature. Guest users' data sent to AI is not associated with any permanent account.
OpenAI's API terms prohibit them from using API inputs to train their models. Your resume content will not be used to train AI systems.
We use session cookies to keep you logged in and CSRF tokens for security. These are strictly necessary and cannot be disabled without breaking core functionality.
We use Google Analytics 4 with IP anonymization enabled to understand how users interact with the Service. This data is aggregated and not personally identifiable.
We do not use advertising cookies, retargeting pixels (beyond Google Ads conversion tracking for our own campaigns), or cross-site tracking technologies.
You can control cookies through your browser settings. Disabling all cookies will prevent you from logging in to the Service.
We retain your data for as long as your account exists or as needed to provide the Service:
We take security seriously and implement appropriate technical and organizational measures:
No system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@resumecv.app.
Depending on your location, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you.
Update or correct inaccurate personal information.
Request deletion of your account and all associated data.
Export your resume data in a machine-readable format.
Object to processing based on legitimate interests.
Request restriction of processing in certain circumstances.
To exercise any of these rights, contact us at privacy@resumecv.app. We will respond within 30 days. You may also delete your account directly from your dashboard settings.
California residents have additional rights under CCPA. We do not sell personal information. You have the right to know what data we collect, request deletion, and opt out of sale (which we do not engage in). Contact us to exercise these rights.
If you are in the European Economic Area or UK, our legal basis for processing is: (a) contract performance for core service features, (b) legitimate interests for security and analytics, and (c) consent for optional communications. You have the right to lodge a complaint with your local data protection authority.
The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover we have collected information from a child under 16, we will delete it promptly. If you believe we may have collected information from a minor, please contact us at privacy@resumecv.app.
We may update this Privacy Policy from time to time. When we make significant changes, we will notify registered users via email at least 14 days before the changes take effect. The updated date at the top of this page will always reflect the latest revision.
Continued use of the Service after policy changes constitutes acceptance of the updated policy.
For privacy-related questions, data requests, or to exercise your rights:
We aim to respond to all privacy-related requests within 30 days.
Questions or concerns about how we handle your data? We're here to help.
privacy@resumecv.app