Privacy Policy

ResumeAI Pro ("ResumeAI Pro," "we," "us," or "our") provides tools to build, optimize, and export resumes. This Privacy Policy explains what information we collect when you use our website and services (the "Service"), how we use and share it, and the choices you have.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

• Account information. When you create an account or sign in — including signing in with Google — we receive your name, email address, and profile picture from your chosen sign-in provider. Authentication is handled by our identity provider (Clerk), and we store an account identifier associated with you.
• Resume content you provide. The personal details, work history, education, skills, summaries, and other text you enter into the builder, and the files (PDF, DOCX, or TXT) you upload to be parsed. This content is provided by you and may include contact information and employment history.
• Job descriptions. Text you paste to score or optimize a resume against a role.
• Purchase records. If you buy a paid tier, our payment processor (Stripe) handles your card details. We do not receive or store your full card number; we retain a record of the purchase, such as the tier, a payment session identifier, and the date.
• AI API keys. If you provide your own AI provider API key, it is stored in your browser (session storage, or local storage only if you opt into persistence) and sent to our server solely to make the request you initiated. We do not store your API key in our database.
• Usage and technical data. Basic request metadata, including your IP address, which we use to apply rate limits and protect the Service from abuse.

If you sign in with Google, we access a limited set of information from your Google Account through Google Sign-In: your basic profile (name and profile picture) and your email address. We use this information only to:

• create and secure your ResumeAI Pro account;
• authenticate you when you sign in; and
• display your identity (such as your name or email) within the Service.

We do not use Google user data for advertising, and we do not sell it. We do not share it with third parties except our sub-processors as needed to operate the Service, or as required by law.

Limited Use disclosure. ResumeAI Pro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can review or revoke ResumeAI Pro's access to your Google Account at any time from your Google Account permissions page.

We use the information we collect to:

• provide, operate, and maintain the Service, including building and exporting resumes;
• authenticate you and maintain your account and purchased entitlements;
• process purchases and grant access to paid features;
• generate AI-assisted results — such as resume optimizations and cover letters — when you initiate them, by sending the relevant text to our AI provider;
• prevent fraud and abuse, including rate limiting; and
• comply with legal obligations and enforce our Terms of Service.

When you use AI features (such as resume optimization or cover letter generation), the resume text and job description you submit are sent to our AI provider (OpenAI) to generate the result. If you supply your own API key, the request is made using your key under your own account with that provider.

The AI provider's handling of that data is governed by its own terms and privacy policy. We do not use your resume content to train AI models.

We do not sell your personal information. We share information only with service providers ("sub-processors") that help us operate the Service, and only as needed for that purpose:

• Google — sign-in and authentication (when you choose Google Sign-In).
• Clerk — user authentication and account management.
• Supabase — database storage for account, purchase, and usage records.
• Stripe — payment processing.
• OpenAI — AI generation for optimization and cover letter features.
• Adzuna — job search results, where such features are used.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.

We retain account and purchase records for as long as your account is active and as needed to provide the Service, resolve disputes, and meet legal, tax, or accounting requirements. Resume content you enter is retained to provide the Service to you. You may request deletion of your account and associated data as described below.

We use reasonable technical and organizational measures to protect your information, including transport encryption (HTTPS) and server-side handling of secret keys. Sensitive credentials, such as payment details, are handled by our payment processor and are never stored on our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• access, correct, or update the personal information we hold about you;
• request deletion of your account and personal information;
• withdraw consent where processing is based on consent; and
• revoke third-party sign-in access, such as Google, from that provider's account settings.

To exercise any of these rights, contact us at privacy@simplemart.dev. We will respond within a reasonable time and as required by applicable law.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We operate from Canada and use service providers that may store and process your information in other countries. Where required, we take steps to ensure your information receives an adequate level of protection when transferred across borders.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes will be reflected here, and your continued use of the Service after an update constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our handling of your information, contact us at privacy@simplemart.dev. You can also review our Terms of Service.