Privacy Policy

1. Who we are

Resumiz is an AI-assisted resume tailoring service. Contact us at support@resumiz.com.

2. What we collect

• Account info: name, email, hashed password, and the optional source and role you provide at signup.
• Resume content: the resume text and job description you submit. We store both inputs and the assistance we generate from them (tailored resume, cover letter, match score, honesty report, list of changes, keywords matched and missing, gaps to address, interview prep, and any application status notes you record).
• Usage data: tailorings per month, plan, timestamps.
• Billing: processed by Stripe. We store a Stripe customer ID and subscription dates, not card numbers.
• Technical data: IP address for rate limiting, server logs.

3. How we use your information

• To provide and improve the tailoring service.
• To enforce plan limits and prevent abuse.
• To process payments and manage subscriptions.
• To send transactional emails (verification, receipts, policy changes).
• To monitor security and debug errors.

We do not sell your data. We do not use your resume content to train AI models. Resume content is sent to the Anthropic Claude API to generate your output only.

4. Third-party services

• Anthropic Claude API: your resume and job description are sent to generate the tailored output. See anthropic.com/privacy.
• Stripe: payment processing. See stripe.com/privacy.
• Vercel: hosting. See vercel.com/legal/privacy-policy.
• Resend: transactional email delivery (verification, password reset, receipts). See resend.com/legal/privacy-policy.
• Upstash Redis: rate limiting and abuse prevention, keyed by IP address. See trust.upstash.com.
• Database host: your data is stored in a hosted PostgreSQL instance.

5. Data retention

We retain your account data and tailoring history while your account is active. Deleting your account removes personal data within 30 days, except where retention is required by law.

6. Your rights

You may have rights to access, correct, or delete your data depending on your jurisdiction (GDPR, CCPA, PIPEDA). Email support@resumiz.com to exercise these rights.

7. Session storage

We use a session cookie to keep you signed in. If you arrive via an affiliate referral link and choose Accept all on our cookie banner, we also set a first-party cookie (resumiz_ref) so we can credit the referrer if you sign up. We do not use advertising or third-party analytics tracking.

8. Security

Passwords are hashed with bcrypt before storage. All data is transmitted over HTTPS. Rate limiting is applied to prevent brute-force attacks.

9. Children

Resumiz is not directed at anyone under 16. Contact us if you believe a minor has submitted personal data and we will delete it.

10. Changes

Material changes to this policy will be communicated by email or a dashboard notice at least 14 days before taking effect.

11. Contact

For privacy questions, contact support@resumiz.com.