Privacy Policy

Resumurai (“we”, “us”, “our”) operates https://resumurai.com. We build tools that let you create, manage, and share resumes and portfolio websites. This policy explains what personal data we collect, why we collect it, how we use it, and the choices you have.

If you have questions, email us at threeamiku@gmail.com.

We only collect data that is necessary to provide or improve the service.

Account information

• Name and email address — to identify your account and send you service-related messages.
• Password (hashed, never stored in plain text) — to authenticate you.
• OAuth tokens (if you sign in via Google or LinkedIn) — to authenticate you without a password.

Profile and resume content

• Work history, skills, education, and achievements you enter or upload.
• Resume PDF files you upload for parsing — processed to extract structured data, then discarded.
• Profile photos and other media you upload.

Public pages

Resume and portfolio pages you publish are accessible to anyone with the link. Do not include sensitive personal information (e.g. national ID numbers, date of birth) that you do not want publicly visible.

Usage data

• Pages visited, features used, and actions taken — to understand how the product is used and where to improve it.
• Browser type, device type, and country — to detect errors and optimize performance.
• IP address — for security (rate limiting, abuse prevention) and rough geolocation.

Cookies and local storage

• Session cookies — to keep you signed in.
• Preference cookies — to remember UI settings.
• Analytics cookies — to aggregate usage statistics (no cross-site tracking).

• Provide the core service: storing and rendering your resumes and portfolio pages.
• Send transactional emails: account verification, password reset, and important service notices.
• Improve the product: analyzing aggregate usage patterns to prioritize features and fix bugs.
• Ensure security: detecting fraud, abuse, and unauthorized access.
• Comply with legal obligations when required by applicable law.

We do not sell your personal data. We do not use your resume content to train AI models without your explicit consent.

We share data only with the third-party services needed to run Resumurai. Each provider is bound by a data processing agreement and may only use your data to provide their service to us.

• Clerk — authentication and user management.
• Cloudflare R2 — file and media storage.
• Analytics provider — aggregate, anonymized usage statistics.
• Infrastructure providers (hosting, CDN) — to deliver the service.

We may disclose data if required by law, court order, or to protect the rights and safety of our users or the public. We will notify you where legally permitted.

We keep your data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance reasons (e.g. billing records).

Uploaded PDF files used for parsing are deleted immediately after the parsing job completes — they are never stored long-term.

Depending on where you are located, you may have some or all of the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to delete your account and associated personal data.
• Portability — request your data in a machine-readable format.
• Restriction — ask us to stop certain uses of your data.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email threeamiku@gmail.com. We will respond within 30 days. You will not face any penalty for exercising your rights.

We use industry-standard safeguards: HTTPS everywhere, hashed passwords, encrypted storage for sensitive fields, and strict access controls. No method of transmission over the internet is 100% secure, but we take reasonable technical and organizational measures to protect your data.

If you discover a security vulnerability, please disclose it responsibly to threeamiku@gmail.com.

Resumurai is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have done so inadvertently, contact us and we will delete the data promptly.

We are based in the United States. If you use Resumurai from outside the US, your data may be transferred to and processed in the US. We rely on standard contractual clauses and other lawful mechanisms where required for cross-border transfers.

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top and, for material changes, send you an email notice. Continued use of Resumurai after changes take effect constitutes acceptance of the updated policy.

Questions, concerns, or requests about this policy should be sent to threeamiku@gmail.com. We take privacy seriously and will respond promptly.