Privacy Policy

1. Introduction

ResumeRight ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our AI-powered resume enhancement and candidate matching platform (the "Service").

By accessing or using ResumeRight, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, password, and professional persona when you register.
• Resume and document data: resumes, job descriptions, and other documents you upload for enhancement, tailoring, or matching.
• Company information: company name and join codes if you use team features.
• Payment information: billing details processed securely through Stripe. We do not store your full credit card number.
• Builder conversation history: questions and answers you provide when using the Resume Builder or JD Creator.

2.2 Information Collected Automatically

• Usage data: features used, daily usage counts, timestamps of interactions.
• Device information: browser type, operating system, and IP address.
• Authentication tokens: session and refresh tokens for maintaining your login.

2.3 Third-Party Authentication

If you sign in with Google, we receive your name, email, profile photo URL, and Google account identifier. We do not access your Google Drive, contacts, or other Google services.

3. How We Use Your Information

• Provide the Service: enhance resumes, tailor documents to job descriptions, score ATS compatibility, and match candidates to jobs.
• AI processing: your documents are processed through our NLP pipeline and may be sent to third-party AI providers (e.g., OpenAI) for enhancement. We send only the content necessary for processing.
• Account management: authenticate your identity, manage subscriptions, and enforce usage limits.
• Improve the Service: analyse usage patterns and feedback to improve accuracy and user experience.
• Communication: send generated documents via email when you request it.

4. Data Storage & Security

• Account data is stored in our database with hashed passwords (bcrypt).
• Uploaded documents are processed in temporary storage and are not retained after your session ends unless you explicitly save them.
• All data is transmitted over HTTPS with TLS encryption.
• Access tokens are short-lived (30 minutes); refresh tokens are used to maintain sessions securely.
• We implement role-based access controls to restrict data access to authorised personnel.

5. Data Sharing

We do not sell your personal information. We share data only:

• With AI providers: document content is sent to OpenAI for processing. Their data usage is governed by their own privacy policy.
• With Stripe: payment data is processed by Stripe under their privacy policy.
• Within your company: if you join a company team, your name, email, and role are visible to other team members and company admins.
• As required by law: we may disclose data to comply with legal obligations or protect our rights.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information in your account.
• Delete your account and associated data by contacting us.
• Export your data in a portable format.
• Withdraw consent for optional data processing at any time.

7. Cookies & Local Storage

We use browser local storage to maintain your authentication session and remember preferences (e.g., anonymous trial usage). We do not use tracking cookies or third-party analytics cookies.

8. Children's Privacy

ResumeRight is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us to have it removed.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

[email protected]