← Back to home

Privacy Policy

1. Data we collect

2. How we use your data

We use your data solely to operate the Service: to authenticate you, parse your resume, generate tailored documents, score them against job descriptions, enforce plan limits, and provide your history. We do not sell your data or use it for advertising.

3. Third-party AI processing

To generate documents, your resume/profile text and the job description you provide are transmitted to a trusted third-party large-language-model (LLM) provider (currently DeepSeek or Anthropic). These providers process the text to return tailored output. We send only what is needed for the task and do not include your account password or payment details. Please review the applicable provider's terms; we are not responsible for their independent practices, but we choose providers that do not require training on your submissions for API use.

4. Cookies and tracking

ResumeAI uses no advertising or analytics cookies. Your login session is held as a bearer token in your browser's local storage, not in a tracking cookie. The only cookie we set is a short-lived, HttpOnly oauth_state cookie used strictly to protect the Google sign-in flow against CSRF; it expires within minutes.

5. Data retention

Your account and content are retained for as long as your account is active. Resumes, profiles, and cover letters you delete are removed from our database, and their stored PDF files are deleted from disk. When you delete your account, your associated data is removed. Minimal request logs are rotated automatically and retained only briefly for operational and security purposes.

6. Your rights

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA (including the right to object to or restrict processing). Contact us to exercise them.

7. Security

Passwords are hashed with bcrypt and never stored in plaintext. Traffic is served over HTTPS. Access to stored PDFs is gated by short-lived, cryptographically signed links, and server logs are kept access-restricted. No system is perfectly secure, but we take reasonable measures to protect your data.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

9. Changes

We may update this policy as the Service evolves. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

To exercise your rights or ask a privacy question, email support@ai-resume-editor.fly.dev.