Privacy Policy

This Privacy Policy describes how ResumePlusAI (https://resumeplusai.com) collects, uses, stores, and protects your personal information. We are committed to safeguarding your privacy and being transparent about our data practices.

1. Information We Collect

1.1 Information You Provide

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent (via Google Analytics)
• Device Data: Browser type, operating system, screen resolution
• IP Address: For geolocation (country-level) to determine currency (INR/USD)
• Cookies: Session management, CSRF protection, theme preference

2. How We Use Your Information

• Resume Building: To generate, enhance, and store your resumes
• AI Enhancement: To send your resume data to AI models for content improvement
• ATS Scoring: To analyze your resume structure and keywords
• JD Tailoring: To match your resume against job descriptions
• Account Management: To authenticate, manage subscriptions, and track usage limits
• Payments: To process subscriptions and one-time payments via Razorpay
• Communication: To send essential service notifications (plan changes, billing)
• Improvement: To analyze aggregate usage patterns and improve our service

We do NOT use your data for targeted advertising, profiling, or selling to data brokers.

3. AI Data Processing

When you use AI features (resume enhancement, JD tailoring, cover letter generation, ATS scoring), your resume data is processed as follows:

• Your resume content is sent to OpenAI's API (via Langchain4j) for processing
• We send only the data necessary for the specific AI feature you requested
• OpenAI processes this data under their API data usage policy — API data is not used to train their models
• AI-generated responses are returned to our server and stored in your resume
• We do not permanently log the raw AI prompts or responses beyond what's stored in your resume

4. Data Storage & Infrastructure

• Database: MongoDB — stores user profiles, resumes, and subscription data
• Authentication: Keycloak (OAuth2/OIDC) — handles login sessions and tokens. We never store your password.
• Payments: Razorpay — handles all payment card/UPI details. We only store transaction IDs and subscription IDs.
• CDN & Security: Cloudflare — provides CDN, DDoS protection, and Turnstile CAPTCHA
• Hosting: Our servers are hosted with industry-standard security practices

5. Third-Party Services

We use the following third-party services that may process your data:

6. Cookies & Local Storage

We use the following cookies and browser storage:

Essential cookies cannot be disabled as they are required for the service to function. You can manage analytics cookies through your browser settings.

7. Data Sharing

We do NOT:

• Sell your personal data to any third party
• Share your resume data with employers, recruiters, or job boards
• Use your data for advertising or marketing profiling
• Share data with data brokers or aggregators

We MAY share data only when:

• Required by law or legal process (court order, subpoena)
• Necessary to protect our rights, safety, or property
• You explicitly consent to specific sharing
• Processing payments through Razorpay (limited to billing info)

8. Data Retention

• Active accounts: Data is retained as long as your account is active
• Deleted resumes: Permanently removed from our database immediately
• Closed accounts: Personal data deleted within 30 days of account deletion request. Anonymized analytics data may be retained.
• Payment records: Retained for 7 years as required by Indian tax law
• Server logs: Automatically deleted after 90 days

9. Your Rights

You have the right to:

• Access: View all personal data we hold about you (via your dashboard and settings)
• Rectification: Update or correct your personal data at any time via Profile Settings
• Deletion: Delete individual resumes from My Resumes, or request full account deletion
• Portability: Export your resume data (available via PDF export)
• Restriction: Request that we limit processing of your data
• Objection: Object to certain types of processing
• Withdraw Consent: Cancel your subscription and stop using AI features at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Security Measures

• Authentication: OAuth2/OIDC via Keycloak — we never store passwords
• CSRF Protection: All form submissions and API calls are CSRF-protected
• Bot Protection: Cloudflare Turnstile — privacy-friendly CAPTCHA alternative
• HTTPS: All traffic is encrypted via TLS/SSL
• CDN Security: Cloudflare provides DDoS protection and WAF
• Payment Security: PCI-DSS compliant via Razorpay — we never handle card numbers
• Access Control: Role-based access (Admin, User) via Keycloak realm roles

While we implement strong security measures, no system is 100% secure. We encourage you to use strong, unique passwords for your Keycloak account.

11. Children's Privacy

ResumePlusAI is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. International Users

• ResumePlusAI is operated from India
• If you access our service from outside India, your data may be transferred to and processed in India
• We use Cloudflare's global CDN, which may temporarily cache content at edge locations worldwide
• AI processing via OpenAI may involve data transfer to US-based servers
• We comply with applicable data protection regulations including principles of GDPR for EU users
• International payments are processed in USD via Razorpay

13. Changes to This Policy

We may update this Privacy Policy periodically. When we make changes:

• We will update the "Last updated" date at the top
• For material changes, we will notify subscribers via email
• A notice will be posted on the website for significant updates
• Continued use of the service constitutes acceptance of the updated policy

14. Contact Us

For privacy-related questions, concerns, or data requests:

• Email: [email protected]
• General Support: [email protected]
• Website: resumeplusai.com/contact
• Location: New Delhi, India

We aim to respond to all privacy inquiries within 30 days.