Privacy Policy

This policy explains how ResumeAI ("we", "us") handles your personal data under India's Digital Personal Data Protection Act, 2023 (DPDP Act). By creating an account you consent to the processing described here. You can withdraw consent at any time by deleting your account.

Data we collect

• Account data: your name, email address and profile picture from Google sign-in, or your email address if you use a sign-in link.
• Resume data: the resume files you upload, the text we extract from them, and the edits you make.
• Job descriptions you paste, and the analyses, tailored resumes and cover letters we generate for you.
• Payment records: order amounts, order and payment IDs and status. Card, UPI and bank details are handled by Razorpay and never reach our servers.
• Technical data: IP address and basic security logs, used to prevent abuse.

Why we use it (purpose)

• To provide the service: reading your resume, scoring it against a job, writing tailored content and exporting files.
• To process payments, issue invoices and prevent fraud and abuse.
• To contact you about your account and purchases.

We do not sell your personal data, and we do not use your resume to train AI models.

Who processes it for us

• Our AI provider (Cloudflare Workers AI or Anthropic Claude, depending on our configuration): receives your resume and job text to generate results.
• Razorpay: payment processing.
• Your browser's speech service, only if you use voice typing: your browser (for example Chrome) converts speech to text. We never receive the audio, only the text you choose to keep.
• Cloud providers for hosting, database, file storage and email delivery (Railway, Cloudflare, Resend, Upstash).
• Google, if you choose Google sign-in.

Some of these providers process data outside India.

Shared links

If you create a share link for a resume, anyone who has the link can read that resume without signing in, until you turn the link off, delete it, or it expires. By default your phone number and email are hidden on the shared page. We count how many times a link is opened. To do this we keep, for each counted view, only the time and a one-way code made from the visitor's IP address and browser that changes every day. We do not store the IP address or browser details themselves, and we do not count link-preview robots or your own visits. Shared pages are hidden from search engines.

How long we keep it

• Uploaded resume files are deleted automatically after 90 days of inactivity.
• Your account data and resumes stay until you delete them or your account.
• Deleting your account removes your profile, resumes, uploaded files, job descriptions, analyses, generated content and order history from our systems. Payment records are also held by Razorpay under its own retention obligations.

Your rights

You can access and correct your data in the app, delete any resume, and delete your whole account from the Account page. You may also ask us to give you a copy of your data, correct it, or erase it, and you may nominate someone to exercise these rights on your behalf. To make a request or a complaint, email [email protected]. If we cannot resolve it, you may approach the Data Protection Board of India.

Security

Data is encrypted in transit. Access is limited to your own account. Uploaded files are only read as text and are never executed.

Children

The service is for people aged 18 and over. We do not knowingly process the data of children.

Changes

We will update the date above when this policy changes and tell you about material changes by email or in the app.