Privacy Policy

1. Who We Are

Resume Optimizer ("we", "us", "our") is operated by myresumeoptimzer.com based in San Bernadino County, California, USA. We operate the website myresumeoptimizer.com and its associated services (collectively, the "Service").

Privacy enquiries: hello@myresumeoptimizer.com

2. What Data We Collect

Data you provide directly

• Account information: Your name, email address, and profile photo (when signing in via Google OAuth).
• Resume content: The text of your resume(s) that you upload or paste into the Service.
• Job descriptions: The job posting text you provide for analysis.
• Voice and tone preferences: Writing style preferences you configure in your profile.
• Contact details: Phone number, LinkedIn URL, location, and other optional profile fields.

Data generated by your use of the Service

• Analysis results: ATS fit scores, gap analyses, and suggested resume bullets generated during your sessions.
• Application history: Records of the roles you have analysed, including drafts and generated cover letters.
• Usage data: Number of applications processed, API token consumption, and associated costs.

Data collected automatically

• Authentication tokens: Session tokens managed by Supabase Auth to keep you logged in.
• Basic usage logs: Standard web server logs including IP address, browser type, and pages visited. These are not linked to your identity and are retained for no more than 30 days.

What we do NOT collect

• We do not collect payment card details. All payments are processed directly by Stripe.
• We do not collect biometric data.
• We do not use advertising trackers or third-party analytics cookies.

3. How We Use Your Data

We use your data solely to provide and improve the Service:

• To authenticate you and maintain your account.
• To process your resume and job description through our AI engine to generate tailored output.
• To store your application history so you can retrieve past analyses.
• To track your usage against your plan limits.
• To send transactional emails (account confirmation, password reset) via Resend.
• To monitor aggregate platform usage for performance and cost management. We never analyse individual users' resume content for platform improvement.

4. AI Processing — Anthropic

Your resume content and job descriptions are transmitted to Anthropic, PBC via their API to generate resume analysis, bullet points, drafts, and cover letters. Anthropic processes this data as a data processor acting on our behalf.

Anthropic's privacy policy: anthropic.com/privacy

We do not use your data to train AI models, and Anthropic's API usage terms prohibit the use of API inputs and outputs for model training without explicit consent.

5. Data Storage and Security

Your data is stored in a Supabase managed PostgreSQL database hosted on AWS infrastructure in the United States. Row-Level Security (RLS) is enforced on all tables, meaning your data is only accessible to your authenticated account.

Payments are handled by Stripe, Inc. Payment card data is never stored on our servers. Transactional emails are sent via Resend, Inc.

We take reasonable technical measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, and regular security reviews.

6. Data Retention

• Account data: Retained for as long as your account is active.
• Application history: Retained indefinitely to support the History feature, unless you delete your account.
• Server logs: Retained for up to 30 days.

When you delete your account, all personally identifiable data associated with your account is permanently deleted from our database within 30 days.

7. Your Rights

Under GDPR (UK and European Economic Area)

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests.
• Lodge a complaint with your local supervisory authority (e.g. the ICO in the UK).

Under CCPA (California residents)

• Know what personal information we collect, use, and disclose.
• Delete your personal information, subject to certain exceptions.
• Opt out of the sale of your personal information. We do not sell your personal information to any third party.
• Non-discrimination — we will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, email hello@myresumeoptimizer.com with the subject line "Privacy Request". We will respond within 30 days.

8. Children's Privacy (COPPA)

This Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately and we will delete it.

9. Cookies

We use only strictly necessary cookies required for authentication and session management (set by Supabase Auth). We do not use advertising, analytics, or tracking cookies. Because we use only strictly necessary cookies, a cookie consent banner is not required under GDPR, CCPA, or PECR.

10. Email Communications

We send transactional emails only — account confirmation and password reset. We do not send marketing emails without your explicit consent. All emails comply with the US CAN-SPAM Act.

11. International Data Transfers

If you are located outside the United States, your data is transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) where required under GDPR for transfers from the EEA/UK to the US, as provided by our sub-processors.

12. Third-Party Sub-Processors

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes, we will notify you by email.

14. Contact

Email:hello@myresumeoptimizer.com
Subject line: Privacy Request
Response time: Within 30 days