Privacy Policy

1. Who We Are

ResumeAI ("we", "our", or "us") is an AI-powered resume builder accessible at airuse-tailor-4pej.vercel.app. We help job seekers create ATS-optimized resumes tailored to specific job descriptions using AI technology powered by Groq.

2. Data We Collect

We collect only what's necessary to provide the service:

• Account data: Your email address and full name when you sign up.
• Resume content: Text you enter into the builder (name, work experience, education, skills) and the job descriptions you paste. This is processed by AI to generate your tailored resume.
• PDF uploads: If you upload a PDF resume, we extract the text temporarily to auto-fill the form. The raw file is not stored.
• Usage data: Anonymous analytics via Vercel Insights (page views, general usage patterns). No personal identifiers are attached.

3. How We Use Your Data

• To generate AI-tailored resumes and cover letters using the Groq API.
• To save and retrieve your generated resumes in your account dashboard.
• To send account-related emails (email confirmation, password reset). We do not send marketing emails without explicit consent.
• To improve and maintain the platform.

4. Data Sharing — We Never Sell Your Data

We do not sell, rent, or trade your personal data to any third parties. Ever. We use the following sub-processors to operate the service:

• Supabase — Authentication and database storage (SOC 2 Type II compliant).
• Groq — AI inference API for resume generation. Your resume text is sent to Groq only when you click "Generate". Groq does not use your data to train models by default under their API terms.
• Vercel — Hosting and edge infrastructure.

5. Data Retention

Your account data and saved resumes are retained for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days.

6. Your Rights

Depending on your location, you may have the following rights under GDPR, CCPA, or other applicable laws:

• Access: Request a copy of the data we hold about you.
• Correction: Update inaccurate data.
• Deletion: Request deletion of your account and all associated data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to specific processing activities.

To exercise any of these rights, email us at privacy@resumeai.app.

7. Cookies & Tracking

We use only essential, functional data: a session token stored in localStorage to keep you logged in. We do not use advertising cookies, third-party trackers, or fingerprinting. Anonymous analytics via Vercel Insights collect only aggregated, non-identifiable data.

8. Security

All data is transmitted over HTTPS (TLS 1.3). User passwords are never stored — Supabase handles authentication with bcrypt-hashed credentials. Database connections use row-level security (RLS) to ensure users can only access their own data.

9. Changes to This Policy

We may update this policy. If changes are material, we'll notify you by email (if you have an account) or by posting a notice on the site. Continued use of the service after changes constitutes acceptance.

10. Contact

Questions about privacy? Email us: privacy@resumeai.app