Privacy Policy

Last updated: January 1, 2025

1. Introduction

Resumiq (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume optimization service.

Please read this policy carefully. By using our Service, you consent to the practices described in this policy.

2. Information We Collect

Information you provide directly:

  • Account information: Email address, name, and profile image (when signing in via Google)
  • Resume content: Text of resumes you paste or upload to the Service
  • Job descriptions: Text of job postings you submit for optimization
  • Payment information: Billing details processed by Paddle (we do not store full payment card information)

Information collected automatically:

  • Usage data: Pages visited, features used, optimization counts
  • Log data: IP address, browser type, referring URLs, timestamps
  • Cookies: Session cookies for authentication and preference cookies

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Service
  • Process resume optimization requests through AI analysis
  • Generate ATS scores, keyword analyses, and optimized resume content
  • Manage your account and subscription
  • Process payments and prevent fraud
  • Send transactional emails (account confirmations, magic links, billing receipts)
  • Respond to support requests and communications
  • Analyze usage patterns to improve our Service
  • Comply with legal obligations

We do not: sell your personal information, use your resume content to train AI models, or share your information with third parties for their marketing purposes.

4. Third-Party Services

We share information with third parties only as necessary to provide the Service:

OpenAI

Your resume text and job descriptions are sent to OpenAI's API for AI-powered optimization. OpenAI processes this data according to their API data usage policies. As of our last review, OpenAI does not use API inputs to train its models.

OpenAI Privacy Policy →

Paddle

Payment processing is handled by Paddle. When you make a purchase, your payment information is submitted directly to Paddle and subject to their privacy policy. We receive only payment status and subscription information.

Paddle Privacy Policy →

MongoDB Atlas

Your account data, resumes, and optimization results are stored in MongoDB Atlas cloud database. Data is encrypted at rest and in transit.

Google OAuth

If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password or access to other Google services.

Vercel

Our application is hosted on Vercel. Access logs including IP addresses and request data may be retained by Vercel according to their privacy policy.

5. Data Storage and Security

Your data is stored on secure servers with encryption in transit (HTTPS/TLS) and at rest. We implement industry-standard security measures including access controls, monitoring, and regular security reviews.

Despite our best efforts, no security system is impenetrable. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

6. Data Retention

We retain your data as follows:

  • Account data: Retained while your account is active and for 90 days after deletion
  • Resume content: Stored until you delete it or close your account
  • Optimization history: Retained for 1 year from creation (Pro/Lifetime); last optimization only for free users
  • Payment records: Retained for 7 years to comply with financial regulations
  • Log data: Retained for up to 90 days

7. Your Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data (subject to legal retention requirements)
  • Portability: Request your data in a machine-readable format
  • Objection: Object to our processing of your data in certain circumstances
  • Withdrawal of consent: Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at support@resumiq.tech. We will respond within 30 days.

8. Cookies

We use the following types of cookies:

  • Essential cookies: Required for authentication and security (cannot be disabled)
  • Preference cookies: Remember your settings and preferences
  • Analytics cookies: Help us understand how users interact with the Service

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features.

9. Children's Privacy

The Service is not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a prominent notice on the Service at least 30 days before the changes take effect. We encourage you to review this policy periodically.

11. Contact Us

For privacy-related questions or to exercise your rights, please contact:

Resumiq

Email: support@resumiq.tech