Privacy Policy

This Privacy Policy explains how Resumate collects and uses personal information when you use our website and console. It includes a short US state-privacy summary.

1. Information we collect

• Account: email, password hash (or Google account id), display name, plan and billing identifiers from Stripe.
• Resume and letters: structured content you enter or we parse from uploads you choose to process.
• Job activity: saved jobs, pasted job URLs, and match-related preferences.
• Usage: product events (for example signup, export, publish) stored in our analytics table to improve the product.
• Technical: essential cookies for authentication and security; server logs.

2. How we use information

• Provide editing, scoring, matching, letters, and public resume links you enable.
• Process payments and subscriptions via Stripe.
• Send transactional email (verification, password reset, email-change notices).
• Secure the service and prevent abuse.

3. AI subprocessors

When you use AI write or rewrite, relevant text may be sent to an AI provider under their terms. We do not use your resume content to train our own models.

4. Uploads

Signed-in import: PDF/DOCX you upload into the console are used to parse fields into your resume. Original upload files are retained only as needed for parsing and are deleted on a 30-day schedule. Structured resume data you keep editing remains in your account until you delete it.

Homepage free ATS check: files or pasted text submitted on the public checker are processed in memory for a one-time score and are not stored in your account or used for training. Do not upload content you are not authorized to process.

5. Sharing

We share data with:

• Stripe — payments
• Auth / email providers — sign-in and transactional mail
• Hosting and database providers — to run the app
• AI providers — only when you invoke AI features

We do not sell your personal information.

6. Public resumes

Resumes are private by default. If you publish a link, anyone with the URL can view the page (subject to your contact toggles). Public pages send noindex, nofollow so search engines should not index them. Unpublish to revoke access.

7. Retention

Account and resume data remain until you delete them or close your account (soft delete may apply before hard deletion). Analytics events may be aggregated or deleted after a reasonable period.

8. US state privacy (summary)

Depending on your state, you may have rights to know, access, correct, or delete personal information, and to opt out of certain “sales” or targeted advertising (we do not sell data). To exercise rights, email privacy@resumate.com. We will not discriminate for exercising privacy rights.

9. Security

We use HTTPS, password hashing, and access controls. No method of transmission is 100% secure; report concerns to privacy@resumate.com.

10. Contact

Privacy questions: privacy@resumate.com.