Privacy Policy

We collect the categories of personal information described below. The categories track the statutory definitions used in the California Consumer Privacy Act (as amended by the CPRA) so that residents of California and other U.S. states with similar laws can map them to their own statutory rights.

Some information you may include in a resume could be treated as “sensitive personal information” under U.S. state privacy laws — for example work authorization or citizenship status, demographic details (gender, ethnicity, veteran status), or accommodation needs.

We process this information only to generate the materials you request. We do not use it to infer characteristics about you, profile you, target advertising, or for any purpose other than providing the Service.

We recommend including only what is relevant to the role you are applying for. The resume upload screen includes a tip on what U.S. employers typically don’t expect on resumes; following that guidance keeps your data minimal.

ResumEdge uses OpenAI as its AI provider to parse resumes and generate tailored materials.

• We do not train any AI model on your data. OpenAI also does not use API submissions to train its models.
• OpenAI may retain API requests for up to 30 days for abuse and misuse monitoring, after which they are automatically deleted. We are evaluating Zero Data Retention (ZDR) status with OpenAI; if approved, we will update this policy and the retention period will drop to zero.
• We send only the content needed to fulfill your request (your resume content and the relevant job description). We do not send your password, billing data, or unrelated account information.
• OpenAI processes data in accordance with its own privacy policy.

We rely on the following providers (sub-processors) to operate the Service. Each provider receives only the data necessary for its function and is contractually required to safeguard it.

We do not sell your personal information and we do not share it with advertising networks. The list above is exhaustive at the time this policy was last updated.

ResumEdge is operated by its founder. Today, only the founder has access to user data, and only to the extent necessary to:

• Provide customer support
• Investigate issues and improve system reliability
• Maintain security and prevent abuse
• Comply with legal obligations

If we hire additional personnel or contractors, we will limit their access on a need-to-know basis and require them to abide by confidentiality and security obligations consistent with this policy.

Data is stored using secure, access-controlled infrastructure operated by our service providers (primarily Supabase and Vercel) within the United States. We use TLS in transit, encryption at rest where supported by the provider, and role-based access controls. We use reasonable safeguards but cannot guarantee absolute security.

We retain personal information only as long as needed for the purposes described in this policy. Concrete retention periods are listed below. When you delete your account, we initiate immediate hard deletion of your account and the associated content stored in our active systems.

Account deletion is immediate and irreversible in our active systems. Residual copies in encrypted backups and operational logs may persist for up to 30 days before they age out automatically. In the rare event that file-storage cleanup encounters an error after the database transaction is committed, residual files may remain until manually removed; we will complete cleanup on a best-effort basis as quickly as possible.

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, and other U.S. states with comprehensive privacy laws have the following rights:

• Access — the right to know what we hold about you.
• Correction — the right to fix inaccurate information.
• Deletion — the right to have your information deleted.
• Portability — the right to receive a copy of your information in a portable format.
• Non-discrimination — we will not discriminate against you for exercising these rights.
• No sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising as those terms are defined under the CPRA. We have not done so in the preceding twelve (12) months.
• Limit use of sensitive personal information. California residents may request that we limit the use and disclosure of sensitive personal information. We already limit our use to providing the Service, as described in Section 3.
• Global Privacy Control. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out request where applicable. Because we do not sell or share personal information, the signal does not change our processing today.
• Authorized agents. You may use an authorized agent to submit a request on your behalf. We may require proof of authorization and may ask you to verify your identity directly.
• Appeals. If we deny your privacy request, you may appeal by replying to our response within 30 days. We will respond to appeals within the timeframes required by applicable law.

You can exercise most of these rights directly in the Service: edit your profile, delete individual generated documents, or delete your entire account from your account settings. To make a separate request or ask a question, email privacy@resumedge.app. We will respond within 45 days of receiving a verifiable request, with one extension only as permitted by law. We may need to verify your identity before fulfilling certain requests.

We use only cookies that are strictly necessary for authentication, session management, and core security functions. We do not use cookies for advertising or marketing.

See our Cookie Policy for the current inventory of cookies we set.

ResumEdge does not make automated decisions that produce legal or similarly significant effects on you. The Service uses AI to draft suggested resumes and cover letters based on your inputs; the outputs are suggestions for your review and editing. Hiring decisions are made by employers, not by ResumEdge.

If we become aware of a personal data breach that affects your information, we will notify you and the relevant state regulators without undue delay and in accordance with applicable U.S. state breach notification laws.

ResumEdge is not intended for users under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at privacy@resumedge.app and we will promptly delete the information.

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the “Last Updated” date at the top. Your continued use of the Service after the updated policy takes effect constitutes acceptance of the changes.