Privacy Policy
Your privacy is important to us at ResumeSmart
Last Updated: October 15, 2025
This Privacy Policy explains how ResumeSmart collects, uses, discloses, and protects your personal information when you use our resume optimization platform. By using our service, you agree to the collection and use of information in accordance with this policy.
- Personal Information: When you create an account, we collect your name, email address, and authentication credentials through Clerk.
- Resume Data: We store the content you provide including your work experience, education, skills, and job descriptions you input.
- Usage Data: We collect information about how you interact with our service, including pages visited, features used, and time spent on the platform.
- Payment Information: Payment details are processed securely through Stripe. We do not store your credit card information on our servers.
- Technical Data: We collect IP addresses, browser type, device information, and operating system for security and analytics purposes.
- Service Delivery: To provide, maintain, and improve our resume optimization services.
- AI Processing: To generate optimized resumes using OpenAI's API based on your input.
- ATS Scoring: To analyze your resume against job descriptions and provide compatibility scores.
- Account Management: To manage your account, credits, and subscription status.
- Communication: To send service-related notifications, updates, and respond to your inquiries.
- Security: To detect, prevent, and address technical issues, fraud, or security threats.
- Analytics: To understand user behavior and improve our platform.
- Database: Your data is stored securely on Supabase infrastructure with industry-standard encryption.
- Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS.
- AI Processing: Resume content is sent to OpenAI for processing. OpenAI does not use your data to train their models.
- Access Control: Only you have access to your resumes. Our team cannot view your resume content unless you explicitly grant permission for support purposes.
- Backups: Regular backups are performed to prevent data loss.
- We do not sell your personal information to third parties. We share data only with the following service providers:
- Clerk: Authentication and user management.
- Supabase: Database hosting and storage.
- OpenAI: AI-powered resume generation and optimization.
- Stripe: Payment processing.
- Vercel: Application hosting and delivery.
- All third-party providers are bound by confidentiality agreements and comply with data protection regulations.
- Essential Cookies: Required for authentication and core functionality.
- Analytics Cookies: Used to understand usage patterns and improve the service.
- Third-Party Cookies: May be set by Stripe, Clerk, or analytics providers.
- You can disable cookies in your browser settings, though this may affect functionality.
- Access: You can access all your resume data at any time through your dashboard.
- Edit: You can modify or update your personal information and resumes.
- Delete: You can delete your account and all associated data at any time from your settings.
- Export: You can download your resumes in PDF format.
- Opt-Out: You can unsubscribe from promotional emails using the link in any email.
- Data Portability: You can request a copy of your data in a machine-readable format.
- Active Accounts: We retain your data as long as your account is active.
- Deleted Accounts: Upon account deletion, we permanently remove your data within 30 days.
- Legal Obligations: We may retain certain data longer if required by law or for legitimate business purposes (e.g., fraud prevention, financial records).
- Backups: Deleted data may persist in backups for up to 90 days before permanent deletion.
- Our service is not intended for users under 16 years of age.
- We do not knowingly collect personal information from children under 16.
- If we become aware that a user is under 16, we will delete their account and data immediately.
- Parents or guardians who believe their child has provided us with personal information should contact us.
- Your data may be transferred to and processed in countries other than your country of residence.
- We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
- By using our service, you consent to the transfer of your information to the United States and other countries where our service providers operate.
- California residents have additional rights under the California Consumer Privacy Act:
- Right to Know: Request disclosure of data collection and sharing practices.
- Right to Delete: Request deletion of personal information.
- Right to Opt-Out: Opt out of the sale of personal information (we do not sell data).
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
- To exercise these rights, contact us at resumesmart0@gmail.com.
- European Union residents have rights under the General Data Protection Regulation:
- Legal Basis: We process data based on consent, contract performance, and legitimate interests.
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Correct inaccurate data.
- Right to Erasure: Request deletion of your data.
- Right to Restriction: Limit how we use your data.
- Right to Object: Object to data processing for marketing purposes.
- Right to Portability: Receive your data in a portable format.
- To exercise these rights or file a complaint, contact us or your local data protection authority.
- We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
- Material changes will be notified via email or a prominent notice on our website.
- Continued use of the service after changes constitutes acceptance of the updated policy.
- We encourage you to review this policy periodically.
- If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: resumesmart0@gmail.com
- Response Time: We respond to all inquiries within 48 hours.
- For urgent privacy matters or data deletion requests, please mark your email as "URGENT - Privacy Request".