Privacy Policy

Effective date: April 14, 2026

Resume Automator ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data.

1. Information We Collect

Information you provide

Account information: Name, email address, country, and password (stored in hashed form only — we never store plaintext passwords).
Career information: Work experience, education, skills, certifications, and any other details you enter into your profile or resume.
Resume content: All resume data you create or generate through the Service.
Payment information: Billing details are processed and stored by Stripe, our payment processor. We do not store your credit card numbers, CVV, or full card details on our servers. We may store your Stripe customer ID for subscription management.

Information collected automatically

IP address: Recorded for security purposes and rate limiting.
Session data: We store session tokens and user agent strings to maintain your login state and detect suspicious activity.

2. How We Use Your Information

Providing the Service: Your career information is used to generate tailored resumes through our AI pipeline.
AI processing: Career data you provide is sent to Cloudflare Workers AI for resume generation. See Section 3 for details.
Account security: IP addresses, session data, and hashed passwords are used to protect your account and prevent abuse.
Billing: We use your email and Stripe customer ID to manage subscriptions, process payments, and send billing-related communications.
Service communications: We may send you emails related to your account, such as verification emails, password resets, and important service updates.

3. AI Processing

When you generate a resume, your career information (profile data, work experience, education, skills, and the target job description) is sent to Cloudflare Workers AI for processing. This data is used solely to generate your resume content. Cloudflare Workers AI does not retain your data after processing is complete. The AI-generated output is stored on our servers as part of your resume.

4. Third-Party Services

We use the following third-party services to operate Resume Automator:

Stripe — Payment processing and subscription management. Stripe's privacy policy: stripe.com/privacy
Resend — Transactional email delivery (account verification, password resets). Resend's privacy policy: resend.com/legal/privacy-policy
Cloudflare — Web hosting, CDN, DNS, and AI processing (Workers AI). Cloudflare's privacy policy: cloudflare.com/privacypolicy

5. Cookies

We use essential session cookies only. These cookies are necessary to maintain your logged-in state and do not track you across websites. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

6. Data Retention

Account data: Your account information, career profile, and resumes are retained for as long as your account is active. When you delete your account, all associated data is permanently removed.
AI job logs: Records of AI processing requests (metadata only, not full career data) are retained for 90 days for debugging and service improvement, then automatically deleted.
Session data: Expired sessions are periodically cleaned up.

7. Your Rights

Regardless of where you are located, you have the following rights regarding your personal data:

Access: You can request a copy of all personal data we hold about you.
Correction: You can update or correct your personal information at any time through the Service.
Deletion: You can delete your account and all associated data from the Settings page.
Export: You can export all your data in a machine-readable format (JSON) from the Settings page.
Object to processing: You can object to our processing of your data. Note that this may require closing your account, as data processing is essential to providing the Service.

8. How to Exercise Your Rights

You can exercise most of your data rights directly from the Settings page in your account. For any requests you cannot complete through the Settings page, or if you have questions, contact us at support@resumeautomator.com. We will respond to your request within 30 days.

9. Data Security

We take reasonable measures to protect your personal data, including:

Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
Hashed passwords: Passwords are hashed using PBKDF2 before storage. We never store plaintext passwords.
Rate limiting: We employ rate limiting on authentication and API endpoints to prevent brute-force attacks and abuse.

While we strive to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information promptly. If you believe a child under 13 has created an account, please contact us at support@resumeautomator.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the email address associated with your account. Your continued use of the Service after such notification constitutes acceptance of the updated policy.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

support@resumeautomator.com