Privacy Policy

This policy explains how Resumeaze handles your personal data. We are the controller of your data. Questions go to [email protected].

• Account: your name, email address, password (stored hashed, never readable by us) and, if you sign in with Google, your profile photo.
• Your content: resumes, cover letters, job applications and notes, contacts, interview practice answers, stories, offers, and the settings you choose.
• Voice: if you use voice interview practice, the audio you speak and the text of the conversation.
• Free tools without an account: if you use a free tool such as the ATS resume checker, we read the file or text you give it to run the checks and do not store it. The resume checker and job match tools do not send it to an AI provider. The bullet point rewriter and cover letter opener do: they send the text you enter to an AI provider (section 4) to write the result, and we do not store it. We count that a tool was used (never its content), limit requests by IP address, and use Cloudflare Turnstile to tell visitors from bots on the tools that use AI.
• Jobs you save: the job details you paste a link to or save with our browser extension (section 10), such as title, company, location, pay and description.
• Companies you follow: the companies you ask us to watch, and the job listings we find for you.
• Usage: which features you use and how often, so we can apply plan limits, fix problems and improve the product. This includes the AI requests you make (the feature, time and whether it worked).
• Payments: your plan, payment status, amount and billing email. Card details are entered with our payment provider and we never see or store them.
• Feedback and support: ratings and comments you send, and your messages to us.
• Technical data: your IP address, browser and device type, and error details, collected when you use the service.

• To provide the service: build and export your documents, run the AI features, track your applications, and send the emails you expect.
• To take payments, give you the plan you bought, and handle refund requests.
• To keep the service safe: limit abuse, block automated access, and spot people creating many accounts to avoid plan limits.
• To understand and improve the product, and to fix errors.
• To meet legal obligations.

Where the law requires a legal basis, we rely on: performing our contract with you (providing the service), our legitimate interests (security, fraud prevention and improving the product), your consent (where we ask for it), and legal obligations.

To run the AI features we send what you ask us to process (your prompts, the parts of your resume or job description involved, and for voice practice your audio) to AI and speech services. Depending on the feature and our configuration these include OpenAI, Anthropic, Google (Gemini), DeepSeek, OpenRouter (which routes to other model providers), Deepgram and Fish Audio. We send only what a request needs.

• We do not sell your content and we do not use it to train our own models.
• Each provider handles the data it receives under its own terms, including how long it keeps it and whether it may use it to improve its models. We cannot control those terms, so please read them.
• AI can make mistakes. Check anything it writes before you use it.

• OpenAI privacy policy
• Anthropic privacy policy
• Google privacy policy
• OpenRouter privacy policy
• DeepSeek privacy policy
• Deepgram privacy policy
• Fish Audio privacy policy

We share data only with the services that help us run Resumeaze, and only as needed:

• Supabase: hosts our database and sign-in.
• Dodo Payments: processes payments and subscriptions, and hosts the billing portal.
• Resend: sends our emails.
• PostHog: product analytics (see section 7).
• Sentry: error monitoring (see section 7).
• Cloudflare Turnstile: checks that sign-ups come from people, not scripts.
• Google: if you choose to sign in with Google.
• The AI and speech providers in section 4.
• Our hosting and infrastructure providers.
• Authorities and advisers, where the law requires it or to protect our rights, for example in a payment dispute.

We do not sell your personal data. Some of these providers are in other countries, including the United States and, for DeepSeek, China, so your data may be processed outside the country where you live. We rely on the safeguards those providers offer for international transfers.

A public profile page is off unless you turn it on. When it is on, the details you choose to show are visible to anyone with the link and may be indexed by search engines. We count visits to the page and the site they came from, and show you those totals. Turn the page off at any time in your profile settings.

• Essential, always on: a sign-in session cookie, security settings, a note of your cookie choice, and error details and page-load timing (including your browser type) that let us fix problems and keep the site fast, using Sentry. The service cannot work without them.
• Analytics (PostHog), only if you accept: page views and how features are used, tied to a random browser ID rather than your name or email. We also record sessions to see where people get stuck. These recordings hide all text on the page and mask everything you type, so they show clicks and movement, not your documents.
• Session replay (Sentry), only if you accept: for a sample of sessions, and for sessions with an error, a replay with text and inputs masked and media blocked.

When you first visit, we ask whether to turn analytics and recordings on. Until you answer, they are off, and nothing for them is stored in your browser. If you reject, the whole service works the same. You can change your mind at any time with Cookie settings here, in the page footer, or in Settings. You can also block or delete cookies in your browser or use a tracker blocker, though parts of the service may then not work.

Security and billing emails always reach you. Reminders, summaries and job alerts are optional: change them in Settings, or use the unsubscribe link in any such email.

• We note the IP address, and the country it is in, each time an account signs in, signs up or starts a checkout. We use it only to spot fraud and repeat sign-ups and to block abusive addresses, and we keep it for 90 days after the address was last seen.
• We rate-limit requests by IP address, we do not accept sign-ups from temporary-email services, and we may compare email addresses to link accounts created to get around plan limits (for example addresses that differ only by a plus tag).
• When you ask for a refund, we save a record of how the account was used since the payment, so a person can fairly decide the request. We keep it for as long as needed to answer disputes and meet legal duties.

The Resumeaze Job Clipper is an optional Chrome extension that saves the job you are looking at to your Resumeaze Inbox or pipeline. It does nothing until you install it and connect it to your account.

• When it reads a page: only when you click its icon, and only the tab you are on. It does not run in the background, read your other tabs or your browsing history, or look at passwords, forms, cookies or anything else on the page. It has no access to any site until you click.
• What it reads: the job posting on that page: the page address, job title, company, location, pay if shown, and the description text. If you select text on the page first, it uses your selection as the description instead.
• What it sends: that job information to Resumeaze, to show how well it matches your latest resume. We compare it on our own servers, so the match check does not go to an AI provider. Nothing is saved until you choose Add to Inbox, Add to pipeline, or Save and tailor my resume. If you save it, it is stored in your account like any other job.
• What it keeps in your browser: an access token that lets it act for your account, a name for the browser (for example Chrome), and which notices you have closed. We store only a one-way fingerprint of the token, so we cannot read it back, and we keep how many jobs it has clipped and when it was last used, which you see in Settings.
• What the token can do: add jobs to your Inbox or pipeline and check a job's match score. It cannot open your resumes, letters, contacts or anything else, and it cannot change your account.
• Notices: the popup can show a short notice from us. To choose which, we use whether you are on the free or a paid plan.
• No tracking: the extension has no analytics, no advertising and no remote code, and it does not sell or share what it reads. It uses the same service providers as the rest of Resumeaze (section 5), for example the one that hosts our database, and only to run the feature. Our use of information received through the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

You are in control. Disconnect a browser at any time in Settings under Connections, and its token stops working straight away. Removing the extension from your browser deletes what it keeps there. Jobs you already saved stay in your account until you delete them (see section 11).

• We keep your content and account while your account is open.
• You can export everything at any time in Settings under Privacy and data.
• To delete your account, email us from your account address. We delete your account, resumes, letters and pipeline within 30 days. Backups are overwritten on their normal schedule.
• We may keep limited records longer where the law requires, for example payment records, and records needed to handle a dispute or enforce our terms.

Depending on where you live, you may have the right to access your data, correct it, delete it, export it, restrict or object to some uses, and withdraw consent. You can export your data yourself in Settings. For anything else, write to [email protected]. We will answer within a month. If you are not happy with our answer, you can complain to your local data protection authority.

We protect your data with encryption in transit, access controls on our database, and limits on who on our team can see it. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.

Resumeaze is for people aged 16 and over. We do not knowingly collect data from younger people. If you think we have, contact us and we will delete it.

We will update this page when our practices change and change the date at the top. For significant changes we will also email you or show a notice in the app.

[email protected]