LEGAL / PRIVACY

Privacy policy.

Effective: January 29, 2026

1. Introduction

At Resumier, we believe that your career data belongs to you. We want to empower you to build the best resume possible while keeping your personal information secure. In this privacy policy, we want to help you understand how and why Resumier ("we," "our," or "us") collects, uses, and shares information about you when you use our resume building application and services.

2. Who We Are

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR), the data controller is Volodymyr Paslavskyi, a sole trader operating under the name Resumier, based in the United Kingdom.

Privacy contact:support@resumier.com. A postal contact address for formal correspondence is available upon legitimate request.

3. What Information We Collect

Information You Provide to Us

We collect information you provide to us directly when you use our Services. This includes:

  • Account Information: We use Auth0 for secure authentication. When you sign up or log in, we collect a unique identifier and, depending on your login method, your email address. We do not store your password directly on our servers.
  • Resume Data: We collect the data you explicitly enter into the resume builder, including:
    • Identity: Name, email, phone, location, job title.
    • History: Employment and education details.
    • Skills & Languages: Proficiency levels.
    • Custom Content: Summaries, hobbies, and other free-form text.
    • Uploaded Assets: Images or files you upload.
  • Payment Information: We use RevenueCat to manage purchases across web and mobile. The applicable payment processor or app store collects payment method details directly. We retain transaction identifiers and records of your purchased quotas, but we do not store full payment method details.

Information We Collect As You Use Our Services

We automatically collect information as you use our Services. This includes:

  • Usage Information: We track when you generate and export resumes to manage your quotas.
  • Logs Data: We may collect device and network connection information for security and debugging purposes.
  • Cookies: We use strictly necessary cookies and similar technologies required for authentication, session management, and security. We do not use advertising cookies.

4. How We Use Your Information

We use information about you to:

  • Provide the Service: To generate, render, and store your resumes.
  • Manage Your Account: To track your usage, quotas, and subscription status.
  • Process Payments: To facilitate and verify transactions through RevenueCat.
  • Security: To enforce rate limits and prevent abuse of our platform.
  • Improve Services: To analyze usage trends and improve the functionality of our resume builder.

We strictly use your data for the sole purpose of building and managing your resumes. We do not sell or rent your personal information.

We do not use your resume data to train AI models, and we do not perform automated profiling that produces legal or similarly significant effects.

5. How We Share Your Information

We may share information in the following ways:

  • With Service Providers: We share information with vendors who help us provide our services:
    • Auth0: For authentication and identity management.
    • RevenueCat: For managing purchases and payment-related transaction data across web and mobile.
    • Amazon Web Services (AWS): For secure file storage services (S3).
  • To Comply with the Law: We may share information if we believe disclosure is required by applicable law or legal process.
  • To Enforce Our Rights: We may share information if we believe your actions are inconsistent with our user agreements or policies.

6. How We Protect Your Information

We take measures to help protect information about you from loss, theft, misuse, and unauthorized access.

  • Secure Storage: Your data is securely stored in our self-hosted database located in the European Union, with files stored securely on Amazon Web Services (AWS) S3 in the EU region.
  • Encryption: We use HTTPS for all data transmission.
  • Access Controls: We limit access to personal information to authorized personnel and systems.

7. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements.

Service Shutdown: In the event that we decide to permanently shut down the Services, we will make reasonable efforts to notify users in advance and, where technically feasible, provide an opportunity to export their data.

Data Deletion Policy: When you delete any data within our Services (such as resumes, sections, or other content), the data is immediately soft-deleted and no longer accessible to you. The data is retained for a period of 7 days for security auditing and fraud prevention purposes, after which it is permanently deleted from our systems.

Account Deletion: If you request to delete your account:

  • Immediate Actions: Your access is revoked immediately. Your Auth0 authentication account and RevenueCat customer record (if applicable) are permanently deleted right away.
  • Local Data Retention: Your resume data, usage history, and other locally stored information is retained for a period of 7 days for security auditing and fraud prevention purposes.
  • Permanent Deletion: After the 7-day retention period, all remaining data will be permanently deleted from our active systems.

Backup and Logs: For security and reliability, limited information may remain in backups or logs for a short period, but will be protected and deleted in accordance with our retention practices.

If you are a user in the European Economic Area (EEA) or the United Kingdom (UK), our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

  • Contractual Necessity: We process your personal information to provide the Services you have requested (e.g., to generate your resume).
  • Legitimate Interests: We process your information for our legitimate interests, such as improving our Services and preventing fraud, provided these interests are not overridden by your data protection interests or fundamental rights and freedoms.
  • Consent: In some cases, we may rely on your consent to process your personal information. You may withdraw your consent at any time.
  • Legal Obligation: We may have a legal obligation to collect and process your personal information.

9. Your Rights and Choices (GDPR/UK GDPR)

You have choices about how to protect and limit the collection, use, and sharing of information about you. Under the GDPR and UK GDPR, you have the following rights:

  • Right to Access: You have the right to request copies of your personal data.
  • Right to Rectification: You have the right to request that we correct inaccurate data or complete incomplete data.
  • Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
  • Right to Data Portability: You have the right to request a copy of your data in a structured, commonly used, machine-readable format.

To exercise these rights, please contact us at support@resumier.com.

You also have the right to lodge a complaint with your local data protection authority. For UK users, this is the UK Information Commissioner's Office (ICO).

10. International Data Transfers

Resumier is operated from the United Kingdom. We process and store information on servers located in the European Union (self-hosted infrastructure in the EU, AWS S3 EU region, and Auth0 EU). Your data is handled in accordance with applicable data protection laws, including GDPR/UK GDPR where they apply.

11. Children

Our Services are not intended for children. Individuals under the age of 16 (or the minimum legal age required in their jurisdiction) are not allowed to create an account or otherwise use the Services.

12. Changes to This Policy

We may change this Privacy Policy from time to time. If we do, we will let you know by revising the date at the top of the policy. We encourage you to review the Privacy Policy regularly to stay informed about our information practices.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us at support@resumier.com.