Skip to content
ResumeAI

Privacy Policy

Last updated: April 2026

ResumeAI ("we," "our," or "us") operates the website resumeai.site (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

1.1 Information You Provide

When you use our Service, you may provide us with personal information including but not limited to:

  • Account information: email address and name when you create an account or make a purchase.
  • Resume content: professional experience, education, skills, and other information you enter into the resume builder.
  • Payment information: billing details processed securely through Gumroad, our payment processor. We do not store your full credit card number on our servers.
  • Communications: messages you send to us through the contact form or email at support@resumeai.site.

1.2 Information Collected Automatically

When you access the Service, we may automatically collect certain information, including:

  • Device information: browser type, operating system, device type, and screen resolution.
  • Usage data: pages visited, features used, time spent on pages, and click patterns through Vercel Analytics.
  • Log data: IP address, access times, referring URLs, and error logs through Sentry for performance monitoring and error tracking.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Service delivery: to generate your AI-powered resume, provide ATS scoring, and enable resume downloads.
  • Payment processing: to process one-time payments and manage your purchase entitlements.
  • Service improvement: to analyze usage patterns, fix bugs, and improve our resume builder and templates.
  • Communication: to respond to your inquiries, send purchase confirmations, and provide customer support.
  • Legal compliance: to comply with applicable laws, regulations, and legal processes.

We do not use your resume content for training AI models. Your resume data is processed solely to generate your requested output and is not shared with third parties for their own purposes.

3. Sharing Your Information

We do not sell your personal information. We may share your information only with the following categories of service providers:

  • Gumroad:for payment processing. Gumroad's privacy policy governs their handling of your payment data.
  • Anthropic:for AI-powered resume generation. Resume content is sent to Anthropic's Claude API for processing and is subject to Anthropic's data usage policies.
  • Vercel: for hosting, analytics, and content delivery.
  • Sentry: for error monitoring and performance tracking.
  • Resend: for transactional email delivery.

We may also disclose your information if required by law, court order, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Retention

We retain your information as follows:

  • Resume content: stored for the duration of your active session and purchase period. After your plan expires or upon account deletion request, resume data is permanently deleted within 30 days.
  • Payment records: retained for 7 years as required by tax and financial regulations.
  • Analytics data: aggregated and anonymized data may be retained indefinitely for service improvement purposes.
  • Communication records: retained for 2 years to provide customer support continuity.

5. Your Rights

5.1 GDPR Rights (European Economic Area Residents)

If you are located in the EEA, you have the following rights:

  • Right of access: request a copy of your personal data.
  • Right to rectification: request correction of inaccurate data.
  • Right to erasure: request deletion of your personal data.
  • Right to restrict processing: request that we limit how we use your data.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interests.

5.2 CCPA Rights (California Residents)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose about you.
  • Request deletion of your personal information.
  • Opt out of the sale of your personal information (we do not sell your data).
  • Non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at support@resumeai.site. We will respond to your request within 30 days.

6. Cookies

We use the following types of cookies and similar technologies:

  • Essential cookies: required for the Service to function, including session management and authentication. These cannot be disabled.
  • Analytics cookies: used by Vercel Analytics to understand how visitors use our Service. These collect anonymized usage data.

We do not use advertising cookies or tracking pixels. You can control cookies through your browser settings, though disabling essential cookies may affect Service functionality.

7. Security

We implement industry-standard security measures to protect your personal information, including:

  • HTTPS encryption for all data in transit.
  • Encryption at rest for stored personal data.
  • Secure payment processing through Gumroad (PCI DSS compliant).
  • Regular security reviews and dependency updates.

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@resumeai.site and we will delete such information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers, including standard contractual clauses where required by GDPR.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: