Privacy Policy

1. Introduction

ResumeEnhance ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume enhancement service (the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: Email address, name, password, and other registration details
• Payment Information: Billing details, credit card information (processed securely through Stripe - we do not store your full payment card details)
• Resume Content: All content you upload, including resumes, cover letters, job descriptions, and related documents
• Profile Information: Any additional information you choose to provide, such as industry, job title, career goals, or preferences
• Communications: Any messages, feedback, or support inquiries you send to us

2.2 Information Automatically Collected

• Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns
• Device Information: IP address, browser type and version, operating system, device identifiers, and mobile network information
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track activity and store certain information
• Log Data: Server logs including access times, pages viewed, and diagnostic data

2.3 Information from Third Parties

• Authentication services (e.g., Google, LinkedIn) if you choose to sign in through these services
• Payment processors (Stripe) for billing and subscription management
• Analytics providers to help us understand Service usage

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Service, including AI-powered resume enhancements
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Payment Processing: To process subscriptions, payments, and billing
• AI Training and Improvement: To train, improve, and optimize our AI models and algorithms (using anonymized and aggregated data)
• Personalization: To customize your experience and provide tailored content and recommendations
• Communications: To send you service-related emails, updates, security alerts, and marketing communications (which you can opt out of)
• Analytics: To analyze usage patterns, measure Service effectiveness, and understand user behavior
• Security: To detect, prevent, and address fraud, abuse, security issues, and technical problems
• Legal Compliance: To comply with legal obligations, enforce our Terms of Service, and protect our rights
• Research and Development: To develop new features, products, and services

4. AI Processing and Data Usage

How We Use Your Content for AI: When you upload a resume or other content, our AI systems process this information to provide enhancements, suggestions, and optimizations. This processing may include:

• Analyzing content structure, grammar, and formatting
• Extracting keywords and skills
• Comparing content against job descriptions
• Generating suggestions and alternative phrasing
• Calculating ATS compatibility scores

AI Model Training: We may use anonymized and aggregated data from user interactions to improve our AI models. We do NOT use your identifiable personal information or specific resume content in publicly available AI models without your explicit consent.

Third-Party AI Services: We may use third-party AI services (such as OpenAI) to power certain features. These providers process data according to their own privacy policies and our data processing agreements with them.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, email delivery, analytics, customer support)
• AI and Technology Partners: With AI service providers who help power our features (under strict data protection agreements)
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity
• Legal Requirements: When required by law, subpoena, court order, or to protect our rights, property, or safety, or that of our users or others
• With Your Consent: We may share information with third parties when you explicitly authorize us to do so
• Aggregated Data: We may share anonymized, aggregated, or de-identified data that cannot reasonably be used to identify you

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specific retention periods include:

• Account Data: Retained while your account is active and for up to 90 days after account deletion (unless longer retention is required by law)
• Resume Content: Retained while your account is active. You can delete individual resumes at any time. After account deletion, content is permanently deleted within 90 days
• Payment Records: Retained for 7 years for accounting and legal compliance purposes
• Analytics Data: Aggregated usage data may be retained indefinitely
• Legal Holds: Data may be retained longer if required by law or legal process

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can access, download, and export your data through your account settings.

7.2 Correction and Update

You can update your account information and content at any time through the Service.

7.3 Deletion

You can delete specific resumes or your entire account. Contact us at [email protected] to request deletion of your data.

7.4 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by adjusting your account settings.

7.5 Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.

7.6 Do Not Track

We currently do not respond to "Do Not Track" browser signals.

7.7 Additional Rights for EU/UK Users (GDPR)

• Right to object to processing
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time

7.8 Additional Rights for California Residents (CCPA)

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your privacy rights

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure data storage with reputable cloud providers
• Employee training on data protection
• Incident response procedures

Important: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. International Data Transfers

Our Service is operated in the United States. If you are located outside the United States, please be aware that information we collect will be transferred to, stored, and processed in the United States and other countries where our service providers operate.

By using the Service, you consent to the transfer of your information to countries outside of your country of residence, which may have different data protection rules. We ensure that such transfers comply with applicable data protection laws through appropriate safeguards such as Standard Contractual Clauses.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

11. Third-Party Links and Services

Our Service may contain links to third-party websites or services that are not owned or controlled by ResumeEnhance. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you visit or use.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)
• Displaying a prominent notice on our Service

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically.

13. Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify you and relevant authorities as required by applicable law. We will provide information about the breach, the data affected, and steps we are taking to address the situation.

14. Your California Privacy Rights

California residents have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, disclose, and sell
• Right to request deletion of personal information
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us at [email protected]. We will verify your request and respond within 45 days.

15. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your data based on consent, contract performance, legitimate interests, or legal obligations
• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your local supervisory authority

To exercise these rights, contact us at [email protected].