Privacy Policy

1. Information we collect

• Account information. Your name and email address. If you register with a password, we store only a securely hashed version, never the password itself. If you sign in with Google or GitHub, we receive your name, email, and profile image from that provider.
• Content you create. The resumes, projects, and templates you build, including the Markdown content and any details you enter.
• Your AI provider keys (BYOK). If you add your own Google Gemini or OpenAI API key, we store it encrypted at rest (AES-256-GCM) and use it only to make requests on your behalf.
• Usage records. Basic logs of AI tailoring requests (provider, model, and timestamp) to operate and secure the Service.
• Technical data. A session cookie required to keep you signed in.

2. How we use your information

• To provide, maintain, and improve the Service.
• To authenticate you and keep your account secure.
• To generate AI-tailored resumes when you request them.
• To send transactional emails, such as email-verification codes.

We do not sell your personal information, and we do not use your resume content to train AI models.

3. AI processing

When you tailor a resume, the resume content and the job description you provide are sent to the AI provider you have configured (Google Gemini or OpenAI) using your own API key. That processing is subject to the chosen provider's terms and privacy policy. We do not send your content to any AI provider unless you initiate a tailoring request.

4. Third-party services

We rely on a small number of processors to run the Service:

• Google / GitHub — optional sign-in.
• Google Gemini / OpenAI — AI tailoring, using your key.
• Resend — delivery of verification emails.
• Microsoft Azure — hosting and data storage.

5. Data retention and deletion

We keep your information for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at support@resumespace.in. Deleting your account removes your resumes, projects, stored API keys, and linked sign-in accounts.

6. Security

We use industry-standard measures to protect your data, including hashed passwords and encryption of stored API keys. No method of transmission or storage is completely secure, but we work to protect your information and limit access to it.

7. Children

The Service is not intended for anyone under the age of 16, and we do not knowingly collect data from children.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

9. Contact

Questions about this policy? Email us at support@resumespace.in.