Privacy Policy

Your privacy is important to us. It is Resoume's policy to respect your privacy regarding any information we may collect from you across our website, https://resoume.com, our mobile applications for iOS and Android, and any other services we own and operate (collectively, the "Services").

1. Information we collect

Log data

When you visit our website or use our mobile apps, our servers may automatically log standard data provided by your browser or device. This may include your Internet Protocol (IP) address, browser type and version, app version, operating system, the pages or screens you visit, the time and date of your visit, the time spent on each page or screen, and other diagnostic details.

Device data

We may also collect data about the device you’re using to access our Services. This may include device type, operating system, unique device identifiers, device settings, and approximate (IP-based) geo-location data. What we collect can depend on your device's individual settings and permissions.

Personal information

We may collect personal information you provide directly, such as:

• Name
• Email address
• Phone number (optional)
• Postal address (optional)
• Profile photo (optional)
• Professional information you add to your resume (work history, education, skills, links to social or portfolio profiles)
• Payment-related identifiers handled by our payment processors (we do not store full card numbers)

Authentication data

When you sign in with Google or Sign in with Apple, we receive a unique user identifier and an email address from the provider. If you choose Apple's "Hide My Email" option, we only receive an Apple private-relay email; we do not receive your real email. We use this information solely to create and authenticate your account.

Resume content and AI processing

To generate, improve, score, or tailor resumes and cover letters, the content you submit (including text from uploaded resumes and the data you enter) is sent to third-party AI service providers — see Section 4. We do not use your resume content to train external models.

Business data

Business data refers to data that accumulates over the normal course of operation on our platform. This may include transaction records, stored files, user profiles, analytics data, and other metrics created or generated as users interact with our Services.

2. Legal bases for processing

We will process your personal information lawfully, fairly and in a transparent manner. We collect and process information about you only where we have legal bases for doing so.

These legal bases depend on the services you use and how you use them, meaning we collect and use your information only where:

• it’s necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (for example, when we provide a service you request from us);
• it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote our services, and to protect our legal rights and interests;
• you give us consent to do so for a specific purpose (for example, you might consent to us sending you our newsletter); or
• we need to process your data to comply with a legal obligation.

Where you consent to our use of information about you for a specific purpose, you have the right to change your mind at any time (but this will not affect any processing that has already taken place).

We don’t keep personal information for longer than is necessary. While we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification. That said, we advise that no method of electronic transmission or storage is 100% secure and cannot guarantee absolute data security. If necessary, we may retain your personal information for our compliance with a legal obligation or in order to protect your vital interests or the vital interests of another natural person.

3. Collection and use of information

We may collect, hold, use and disclose information for the following purposes, and personal information will not be further processed in a manner incompatible with these purposes:

• to provide you with our platform's core features (resume generation, editing, scoring, cover letters, interview practice, headshots);
• to process transactional or ongoing payments and manage subscriptions;
• to enable you to access and use our website, mobile apps, and associated services;
• to contact and communicate with you regarding your account or support requests;
• for internal record keeping and administrative purposes;
• for analytics and service improvement;
• for advertising and marketing, where you have consented to receive such communications;
• to comply with our legal obligations and resolve any disputes.

4. Disclosure of personal information to third parties

We share personal information only with service providers who help us operate the Services. The main categories and processors are:

• Authentication & data storage: Google Firebase (Authentication, Firestore, Cloud Functions) and Hetzner Cloud (application servers).
• AI processing: Google (Gemini), OpenAI, and fal.ai — used to generate, edit, and score resume and cover-letter content, and to produce AI headshots when you opt in.
• Payments and subscriptions: RevenueCat (subscription management), Apple App Store, and Google Play Store (in-app purchase processing).
• Analytics, error logging, communications and similar operational tooling, where applicable.
• Legal and regulatory bodies, where required by law or to establish, exercise or defend our legal rights.
• Acquirers, in the event of a merger, acquisition, or sale of assets (see Section 9).

5. International transfers of personal information

Personal information is primarily stored and processed on servers located in Germany (Hetzner) and on Google Cloud / Firebase infrastructure, which may include locations within the European Union and the United States. Some third-party AI providers process data in the United States. By using the Services, you consent to these transfers.

Where personal information is transferred from the European Economic Area (EEA) to a country outside the EEA, the transfer is protected by appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or other legally accepted means.

6. Your rights and controlling your personal information

Choice and consent: By providing personal information to us, you consent to us collecting, holding, using and disclosing your personal information in accordance with this privacy policy. If you are under 16 years of age, you must have your parent or legal guardian's permission to use the Services.

Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy.

Restrict: You may choose to restrict the collection or use of your personal information. If you have previously consented to direct marketing, you may opt out at any time by contacting us using the details below.

Access and data portability: You may request details of the personal information we hold about you, request a copy in a portable format, or request that it be transferred to another provider.

Correction: If any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below and we will take reasonable steps to correct it.

Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.

Complaints: If you believe we have breached a relevant data protection law, please contact us with full details and we will investigate. You also have the right to contact a regulatory body or data protection authority.

Unsubscribe: To unsubscribe from our email list or opt out of communications, please contact us using the details below or use the opt-out link in the message.

7. Account deletion

You can delete your account at any time directly inside the Resoume mobile app from the account menu ("Delete Account"). When you delete your account:

• Your user profile, resumes, cover letters and related personal data are permanently removed from our database;
• Your authentication account is deleted from Firebase Authentication;
• If you signed in with Apple, your Sign in with Apple authorization is revoked with Apple, so Resoume no longer appears under your Apple ID's "Sign in with Apple" settings.

Some information may be retained for a limited period where required to comply with legal, tax, or accounting obligations, or to resolve disputes. You may also request deletion by emailing privacy@resoume.com.

8. Cookies

We use cookies and similar technologies on our website to remember your preferences and to understand how the site is used. A cookie is a small piece of data stored on your device by your browser. Please refer to our Cookie Policy for more information. Our mobile apps do not use browser cookies but may use equivalent local-storage mechanisms for the same purposes.

9. Business transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we may include data among the assets transferred. If this occurs, we will notify you. You may delete your account if you do not consent to such a transfer.

10. Limits of our policy

Our Services may link to external sites that are not operated by us. We have no control over the content and policies of those sites and cannot accept responsibility for their privacy practices.

11. Supplemental notice for California residents

This Supplemental California Privacy Notice applies to processing of personal information subject to the California Consumer Privacy Act ("CCPA"). The CCPA gives California residents the right to know what categories of personal information we have collected, whether it has been disclosed for a business purpose in the preceding 12 months, the right to request deletion, and the right not to receive discriminatory treatment for exercising these rights.
Resoume does not "sell" personal information as defined by the CCPA, and we have no actual knowledge of any "sale" of personal information of minors under 16 years of age. To exercise any of your CCPA rights, please contact us using the details below; we may need to verify your identity by confirming the email associated with your account.

12. Supplemental notice for Nevada residents

If you are a Nevada resident, you have the right to opt out of the sale of certain personal information. You can exercise this right by contacting us with the subject line "Nevada Do Not Sell Request" and providing the email associated with your account. We do not currently sell personal information as defined in Nevada Revised Statutes Chapter 603A.

13. Children's information

The Services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information without consent, please contact us and we will promptly take steps to delete it.

14. Changes to this policy

We may update this privacy policy to reflect current practices. We will take reasonable steps to let users know about material changes via our website or in-app notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

Resoume's Data Controller
Gobie Nanthakumar
privacy@resoume.com

Resoume's Data Protection Officer
Gobie Nanthakumar
privacy@resoume.com

This policy is effective as of 6 May 2026.