Privacy Policy

What we collect

• Account details: your name, email address and a securely hashed password (we never see or store the password itself).
• Resume content: everything you enter in the builder, including contact details, work history, references and an optional photo.
• Usage counters: how many AI requests your account makes each day, so we can apply fair-use limits. These are deleted after a few days.
• Technical data: our hosting providers keep standard server logs (such as IP address and browser type) for security and troubleshooting.

You can use the builder without an account. In that case your draft stays in your own browser and is never sent to us unless you save it, use an AI feature or run a check that needs our server.

How we use it

• To provide the service: save your resumes, generate PDFs, run the ATS check and show public pages you choose to share.
• To keep accounts secure, prevent abuse and enforce limits.
• To send essential emails, such as password reset links. We don't send marketing emails without your consent.

We don't sell your data, show ads or use advertising trackers.

AI features

When you use an AI feature (the assistant, rewrites, cover letters or importing a resume), the relevant resume content is sent to Google's Gemini API to generate the answer and is handled under Google's API terms. We send only what the feature needs and never your password or photo. The ATS check itself runs in your browser and does not use AI.

Public resumes

Resumes are private by default. If you turn on sharing, anyone with the link can view and download that resume, and search engines may index the page. Turn sharing off at any time to remove access.

Cookies and local storage

We don't use tracking cookies. Your browser's local storage keeps you signed in and holds unsaved drafts; clearing your browser data removes them.

Who processes your data

We rely on trusted providers to run ResumeX: cloud hosting for the website and API, a managed database, Google (Gemini) for AI features and an email provider for account emails. They process data only to provide their service to us.

How long we keep it

We keep your account and resumes until you delete them. Deleted resumes and accounts are removed from our database immediately; backups are overwritten on a rolling basis.

Your rights and choices

• Access and portability: download all your data from Account settings.
• Correction: edit your resumes and name at any time.
• Deletion: delete individual resumes, or your whole account from Account settings.
• Depending on where you live (for example the EU/UK under the GDPR), you may have further rights, such as objecting to processing or complaining to a data protection authority.

Security

Passwords are hashed, connections are encrypted in transit, sign-in attempts are rate-limited and changing your password signs out every other device. No system is perfectly secure, so please use a strong, unique password.

Children

ResumeX is not intended for children under 16, and we don't knowingly collect their data.

Changes and contact

We'll update this page when our practices change and note the date at the top. For privacy questions or requests, email us at omi@omikhan.com.