Privacy policy

1. What we use to help you

• Account information: your name, email and login details, to create your account and sign you in.
• Sign-in with Google or LinkedIn: if you choose it, that service tells us your name, email address and profile picture. We never receive your password for it and, from LinkedIn, no work history. A LinkedIn profile you save as a PDF and upload yourself is handled like any other CV.
• CV and job information: the career history, contact details, photo and other content you choose to add, plus saved jobs, applications and AI suggestions. This lets you create CVs, use career tools and return to saved work.
• Purchase information: your plan, payment references and subscription status, to provide paid access, manage billing and handle refunds.
• Support messages and technical information: what you send us, plus IP addresses, device/request details and security/error logs, to answer you, keep accounts safe and fix problems.
• Newsletter: if you subscribe, your email address and a record of your consent, to send you the Resumea newsletter with guidance on CVs, applications and your job search. We send it only with your consent.

Most information comes from you. We also receive login checks and payment/subscription updates from our providers. You choose what to put in your CV; without the relevant account, career or purchase information, some features cannot work.

Under GDPR, we use account, CV, purchase and support information to deliver the service you request (our contract, including steps you request before buying). Required financial records are kept for legal obligations. Security, troubleshooting and handling claims support our legitimate interest in a safe, reliable service. Where we ask for consent, you can withdraw it for future use.

2. How AI uses your information

We use OpenAI for AI features. Each feature selects the career and job text it needs, leaving out the name, email, phone, address and photo in your contact fields. We also remove contact details we recognise in text. Text you provide can still identify you, so please leave out unnecessary sensitive details.

We have not enabled OpenAI’s optional use of your requests and AI results to train its models. You review AI suggestions and decide what to use. Resumea does not make hiring decisions or decisions with legal or similarly significant effects about you.

3. Who helps us provide Resumea

• Hosting, account and database providers run the website, check access and store your account and saved CV/job data. They process the information needed for those tasks.
• OpenAI receives the selected text described above to produce AI suggestions.
• Google and LinkedIn confirm who you are when you choose to sign in with them. Their own privacy notices apply to that sign-in.
• PayPro Global handles checkout as our Merchant of Record. We send your account email, plan and payment references—not your CV or photo. PayPro collects checkout/billing information and handles payment, tax, fraud and refund duties, including some uses for its own legal obligations.
• Job-search services receive search terms, location or a public job link—not your full CV. Email services deliver support messages.
• Newsletter sign-ups are stored with our hosting provider. An email service delivers the newsletter and receives your email address—not your CV.

We do not sell personal data. We may disclose information to advisers or authorities when necessary and lawful. Email us for recipient details. External checkout and job websites have their own privacy notices.

4. Protection and your browser

We use HTTPS connections, sign-in and ownership checks, and task-specific data filters to help protect your information. These measures reduce risk; no online service can promise perfect security.

Documents are read and PDFs created in your browser. Saving a CV to your account is separate: its content can be stored with our database provider. Browser storage supports sign-in, preferences, drafts and checkout—not advertising or analytics. Local copies can remain until Resumea or you clear them. Clearing browser storage may sign you out; it does not delete CVs saved in your account.

5. Processing outside Europe

Some providers also process personal data outside the EU/European Economic Area. Where required, transfers rely on an applicable adequacy decision or the European Commission’s Standard Contractual Clauses, with additional safeguards where needed. You can email us for recipient/country details and information about, or a copy of, the safeguards.

6. How long information stays

• Account and saved work: kept while your account holds them, until you delete them or request account deletion, except limited records needed by law or for legal claims.
• Support emails: removed when no longer needed for your request, follow-up, disputes or legal obligations.
• Newsletter: your email address is kept until you unsubscribe or ask us to remove it. We may keep a record of your consent and unsubscribe request where needed to show that we respected your choice.
• Payment and agreement records: kept for the applicable tax/accounting periods or a related legal claim.
• Technical logs and provider backups: retention depends on the provider’s service settings. Deleted data may remain in retained backups until those copies expire. Ask us for the applicable retention details.

OpenAI may retain temporary processing/cache data and abuse-monitoring logs. Its standard abuse logs are generally kept for up to 30 days, longer where required by law or necessary for security. This means data is not always erased immediately after an AI request finishes.

7. Your choices and rights

You can edit or delete saved work and email support@resumea.ai to request deletion of your data or account. You can also ask to see or correct your data, receive an electronic copy for reuse, limit its use or object to processing based on legitimate interests. Where consent is used, you can withdraw it without affecting earlier lawful use.

You can unsubscribe from the newsletter at any time using the link in any newsletter email or by writing to us. This does not affect your account or paid plan.

These rights depend on the circumstances. Required financial/legal records and backup retention can limit immediate deletion. Requests are normally free; we normally respond within one month and explain within that month if a lawful extension is needed. You also have the right to complain to a data-protection authority.

8. Keeping this notice up to date

The date above shows when this notice was last updated. If anything is unclear, please write to support@resumea.ai—we are happy to explain.