PRIVACY POLICY

ResumeAdapter

Effective: March 2025

1. INFORMATION WE COLLECT

We collect information necessary to provide our resume optimization services, including:

  • Account information (email, name)
  • Resume content for analysis
  • Usage data to improve our services
  • Payment information for subscriptions

2. HOW WE USE YOUR INFORMATION

Your information is used to:

  • Provide resume analysis and optimization
  • Improve our AI algorithms and services
  • Process payments and manage subscriptions
  • Send service updates and notifications

3. DATA SECURITY

We implement robust security measures to protect your data:

  • Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256 encryption)
  • Secure Storage: Cloud infrastructure with regular security audits and backups
  • Access Controls: Strict access controls limiting employee access to personal data on a need-to-know basis
  • Security Monitoring: Regular security audits, vulnerability assessments, and incident response procedures

Data Breach Notification: In the event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours as required by applicable law.

4. DATA RETENTION

We retain your personal data only as long as necessary to provide our services or comply with legal obligations:

  • Account Data: Retained while your account is active and for 90 days after account deletion
  • Resume Data: Retained for 90 days after last use, or until account deletion, whichever comes first
  • Analytics Data: Aggregated and anonymized data may be retained indefinitely for service improvement
  • Payment Records: Retained as required by law (typically 7 years for tax/accounting purposes)

You can request deletion of your data at any time by contacting us. We will process deletion requests within 30 days, subject to legal retention requirements.

5. THIRD-PARTY SERVICES AND DATA PROCESSORS

We use trusted third-party services to provide and improve our services. These third parties process your data on our behalf under strict data processing agreements:

  • Payment Processing: Stripe (payment information, subscription data)
  • Analytics Services: Google Analytics, Plausible Analytics, Datafast (website usage, page views, user interactions)
  • Cloud Infrastructure: Firebase (authentication, database storage), Supabase (additional cloud services)
  • Marketing & Performance: Google Tag Manager, Hotjar (user behavior tracking, conversion optimization)
  • AI Services: OpenAI (resume analysis and content generation)

Data Sharing: We do not sell your personal information to third parties. We only share data with these processors as necessary to provide our services. All third-party processors are contractually obligated to protect your data and comply with applicable privacy laws.

6. YOUR RIGHTS

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of your personal data we hold
  • Right to Correction: Request correction of inaccurate or incomplete data
  • Right to Deletion: Request deletion of your personal data (subject to legal retention requirements)
  • Right to Data Portability: Export your data in a machine-readable format
  • Right to Object: Object to processing of your data for certain purposes
  • Right to Withdraw Consent: Withdraw consent for cookie-based processing at any time via Cookie Preferences
  • Right to Opt-Out: Opt-out of marketing communications

To exercise these rights, contact us. We will respond to your request within 30 days.

8. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request information about what personal information we collect, use, disclose, and sell
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt-out of the sale of your personal information (we do not sell personal information, but you can opt-out of sharing for advertising purposes)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Do Not Sell My Personal Information: We do not sell your personal information. However, if you would like to opt-out of any sharing of your information for advertising purposes, please contact us or use our Cookie Preferences to disable marketing cookies.

To exercise your California privacy rights, contact us with the subject line "California Privacy Rights Request".

9. GDPR RIGHTS (EU USERS)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal Basis: We process your data based on:
    • Consent (for cookies and marketing communications)
    • Contract performance (to provide our services)
    • Legitimate interests (for analytics and service improvement)
  • Data Transfers: Your data may be transferred to and processed in countries outside the EU (including the United States). We ensure appropriate safeguards are in place through Standard Contractual Clauses and other mechanisms as required by GDPR.
  • Data Protection Officer: For GDPR-related inquiries, please contact us.
  • Right to Lodge Complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have violated GDPR.

10. CHILDREN'S PRIVACY

Our services are not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. UPDATES TO PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of significant changes by:

  • Posting a prominent notice on our website
  • Sending an email to registered users
  • Updating the "Last Updated" date at the bottom of this policy

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

13. CONTACT US

For privacy concerns, data requests, or questions about this policy, please contact us:

Last Updated: March 2025