Your Privacy Matters

1. Information We Collect

We collect information that you provide directly, data generated through your use of our platform, and limited information from third-party services you connect.

Account Information

When you create an account, we collect your name, email address, and password. If you sign in through Google or GitHub OAuth, we receive your name, email address, and profile picture from those services. If you use ResumeAgentics in guest mode, we store a temporary session identifier in your browser's localStorage — no account data is sent to our servers.

Resume and Career Data

This includes the information you enter into the resume builder: work history, job titles, company names, dates of employment, education history, skills, certifications, professional summary, and contact details such as phone number and mailing address. This is the most sensitive data we handle, and we treat it with the highest level of care.

Imported Data

When you upload a PDF or DOCX file, or import your LinkedIn profile, our AI parser extracts your career information and structures it within the builder. The original uploaded files are processed and not permanently stored after parsing is complete.

Payment Information

Subscription payments are processed through Stripe, a PCI DSS Level 1 certified payment processor. We do not store your full credit card number, CVV, or bank account details on our servers. Stripe provides us with a transaction ID, last four digits, and billing status.

Usage Data

We automatically collect browser type, operating system, IP address, device information, pages visited, features used, resume view counts, download counts, and session duration. This data helps us improve the platform and troubleshoot issues.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create, edit, store, and export your resumes and career documents.
• To power AI features including resume suggestions, content enhancement, review scoring, career coaching, job matching, resume tailoring, and cover letter generation.
• To process and manage your subscription payments and billing.
• To personalize your experience by recommending relevant templates and features.
• To send transactional emails such as account confirmation, password reset, and export notifications.
• To analyze aggregated and anonymized usage patterns to improve our service, fix bugs, and develop new features.
• To detect, prevent, and respond to fraud, abuse, unauthorized access, and other security threats.
• To comply with legal obligations and respond to lawful requests from authorities.

3. AI Processing of Your Data

ResumeAgentics uses artificial intelligence to power many of our core features. Understanding how your data flows through these systems is essential to trust, so we want to be fully transparent.

4. Third-Party Services

We work with trusted third-party service providers to deliver our platform. Each provider only receives the data necessary for their specific function.

• Stripe — Handles all payment processing. PCI DSS Level 1 certified. We never see or store your full card details.
• OpenAI and Anthropic — Power our AI features under strict data processing agreements. They process your resume text to generate suggestions and do not retain your data for model training.
• Google and GitHub — Provide OAuth authentication. They share only the minimum data needed to verify your identity: name, email address, and profile picture.
• Analytics Providers — Collect anonymized usage data (page views, feature adoption, session duration) to help us understand how users interact with our platform and where to make improvements.

5. Data Sharing and Disclosure

We share your personal information only in the following limited circumstances:

• Service Providers: With the third-party providers listed above, strictly for delivering our platform services and under contractual data protection obligations.
• Legal Requirements: When required by law, regulation, or valid legal process (such as a subpoena or court order), or when necessary to protect the rights, property, or safety of ResumeAgentics, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will provide notice before your data is subject to a different privacy policy.
• Public Resume Sharing: If you choose to use our public profile or shareable resume link features, the resume content you share becomes accessible via that URL. You control what you share and can revoke access at any time.

6. Cookies and Tracking Technologies

We use a minimal set of cookies and browser storage technologies:

Essential Cookies

JWT (JSON Web Token) authentication tokens keep you securely logged in across sessions. These are strictly necessary for the platform to function and cannot be disabled without losing access to your account.

Functional Storage

We use localStorage to save your theme preferences, editor settings, and guest mode resume data. This data stays in your browser and is not transmitted to our servers (except guest resume data if you choose to create an account and migrate it).

Analytics Cookies

We use anonymized analytics to understand how our platform is used — which features are popular, where users encounter friction, and how to improve the experience. These cookies do not identify you personally.

7. Data Retention

• Active Accounts: Your data is retained for the duration of your account. As long as your account is active, your resumes, career documents, and settings are preserved.
• Deleted Accounts: When you delete your account, all personal data is permanently purged within 30 days. Anonymized, aggregated analytics data (which cannot identify you) may be retained for product improvement.
• Guest Mode: Guest data is stored exclusively in your browser's localStorage. It is never transmitted to our servers. Clearing your browser data removes it permanently.
• Exported Files: PDF, DOCX, and Markdown files are generated on-demand and delivered directly to your browser. We do not store copies of exported files on our servers after the download completes.
• AI Processing Logs: Data sent to AI providers for processing is transient. It is not retained by ResumeAgentics or our AI providers beyond the duration of the individual request.

8. Data Security

Protecting your career data is a core priority. We implement industry-standard security measures at every layer:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
• Encryption at Rest: Data stored on our servers is encrypted using AES-256 encryption.
• Password Security: Passwords are hashed using bcrypt and never stored in plaintext. We do not have access to your actual password.
• OAuth Token Security: Third-party authentication tokens are stored securely and never exposed in plaintext.
• Access Controls: Role-based access controls ensure that internal team members can only access the data necessary for their function.
• Security Audits: We conduct regular security assessments and vulnerability testing to identify and address potential risks.
• Infrastructure: Our platform is hosted on SOC 2 compliant cloud infrastructure with automated monitoring and incident response.

While no system is 100% immune to threats, we are committed to maintaining the highest practical standard of data protection and responding promptly to any security incidents.

9. Your Rights and Choices

For All Users

Regardless of where you are located, you have the right to:

• Access and review the personal data we hold about you.
• Correct any inaccuracies in your personal information.
• Delete your account and all associated data.
• Export your resumes in PDF, DOCX, or Markdown format.
• Opt out of non-essential email communications.

To exercise any of these rights, email us at privacy@resumeai.com or visit your account settings. We will respond to verified requests within 30 days.

10. International Data Transfers

ResumeAgentics is based in the United States, and your data may be processed on servers located in the United States. If you are accessing our platform from outside the US, please be aware that your data will be transferred to and processed in the US.

For users in the EU/EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and comprehensive data processing agreements with all our service providers to ensure that your data receives an adequate level of protection regardless of where it is processed.

11. Children's Privacy

ResumeAgentics is designed for professionals and job seekers and is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.

If we become aware that we have inadvertently collected personal data from a child under 16, we will take immediate steps to delete that information. Parents or guardians who believe their child has provided us with personal information should contact us at privacy@resumeai.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by email (if you have an account) or by posting a prominent notice on our website prior to the changes taking effect.

Your continued use of ResumeAgentics after any changes to this policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, we are here to help.