Privacy policy.

This Privacy Policy explains how Resumarc ("Resumarc", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use our website, resume and cover letter builder, templates, resume checker, AI features, and related services (together, the "Services"). Resumarc Limited, a private company limited by shares with registration number RC 9810124, is the controller of the personal information handled through the Services.

By using the Services you agree to this Policy. It should be read together with our Terms of Use. If you do not agree, please do not use the Services.

We collect the following categories of personal information:

• Account information: your email address, a hashed password if you set one, and how you sign in (email and password, Google, or a magic link).
• Profile information: details you choose to add, such as your name, phone number, location, and profile photo.
• Content you create: the information you put into your resumes and cover letters, including work history, education, skills, summaries, and any files you import, together with the answers you give when setting up a document, such as your career stage, seniority, job-search goal, and target job title. Cover letters may also include details you provide about a recipient, such as their name, company, and email address. If you ask us to prepare a document for you, this also includes the resume or other details you send us for that purpose.
• Payment information: when you buy a Pass, our payment provider Polar processes the payment. Polar handles your card details; we receive limited information such as the purchase, the type of payment method, and your billing country. If we agree to accept a payment outside our checkout, for example by bank transfer, we record the amount, currency, payment method, date, and any reference you give us, and we receive the details your bank includes with the transfer, such as the payer's name.
• Export records: each time you download, email, or print a resume or cover letter, we record which document it was, its name, the format, and when. We keep this record whether or not analytics is on, because our refund policy depends on whether you have exported a document.
• Usage information: how you interact with the Services, together with your IP address, which we use to run the Services and to protect sign-in and forms from automated abuse. Unless you turn analytics off, we also collect analytics events and session recordings through PostHog to understand how the Services are used.
• Cookies: small files used to keep you signed in, to protect our sign-in and forms from automated abuse, and, unless you turn it off, to run analytics. We do not use advertising or marketing cookies.
• Messages you send us: the content of your support requests and other communications.

We use your personal information to:

• provide, operate, and maintain the Services, including saving your documents and rendering live previews and exports;
• power AI features that generate, improve, score, or import content at your request;
• process payments, manage your Passes, track your daily AI credits, and apply our refund policy;
• prepare a resume or cover letter for you when you ask us to, add it to your account, and email you when it is ready and when a Pass you paid for outside our checkout is active;
• send you service messages you cannot opt out of, such as security, account, and transaction notices;
• send optional product updates and tips, which you can unsubscribe from at any time;
• send you one reminder when a resume or cover letter you saved has been left unfinished for a week, which you can turn off in your notification settings or with the unsubscribe link in that email;
• personalize your experience and remember your settings;
• understand and improve how the Services are used;
• keep the Services secure and detect, prevent, and investigate fraud, abuse, and breaches of our Terms;
• comply with our legal obligations and enforce our agreements.

When you use an AI feature, we send the relevant content you are working on (for example, the text of your resume, or a file you import) to the AI provider that powers that feature (currently OpenAI) so it can return the result to you. We use this provider only to deliver the feature you requested.

When you ask us to write a whole resume with AI, the request carries only what the draft is written from: your target job title, the job titles, employers and dates of your work history, any job descriptions you have already written, and your qualifications, fields of study, institutions and end years. Your name, email address, phone number and address are not included, so neither our servers nor the AI provider receive them for this feature; they stay in your resume as you entered them.

When you ask us to write a cover letter with AI, you choose one of your saved resumes and enter the job title and company. The request carries that job title and company and, from the resume you chose, only its summary, the job titles, employers and descriptions of up to four of your most recent roles, up to three qualifications with their fields of study and institutions, and up to fifteen skills. The dates of those roles and the end years of those qualifications also reach our servers, where we use them to choose a template, but they are not sent to the AI provider. Your name, email address, phone number and address, and any details of the person you are writing to, are not included, so neither our servers nor the AI provider receive them for this feature.

AI output can be inaccurate or incomplete, so please review it before you rely on it. Our Terms of Use explain more about AI-assisted content.

We use a small number of strictly necessary cookies, plus an analytics category that is on by default and can be turned off at any time. We do not use advertising or marketing cookies.

• Essential: to keep you signed in, to protect sign-in and forms from automated abuse, and to remember your cookie choices. These are required for the Services to work.
• Analytics (on by default, always your choice): we use PostHog to understand how the Services are used, covering the pages you visit, the features you use, session recordings of your visit, and technical errors that occur in your browser. Recordings are never made on the pages where you build, edit, preview or share a resume or cover letter, and documents shown anywhere else are blanked out of them. Recordings also mask what you type into form fields, and may be analysed automatically to help us find and fix problems. We do not use analytics to build advertising profiles.

The cookie bar on your first visit lets you accept this or manage it, and you can change your choice at any time using the "Cookie preferences" link in the footer. Turning analytics off stops analytics and recordings immediately. Your display preferences, such as light or dark theme, are stored in your browser's local storage rather than in cookies. You can also block or delete cookies through your browser settings, though blocking essential cookies may stop you from signing in.

We do not sell your personal information. We share it only in these situations:

• Service providers: companies that help us run Resumarc under contract and may use your information only to provide services to us. They include Polar (payment processing), OpenAI (AI features — the resume or cover-letter content you submit, and any file you import, are sent to generate your result), Cloudflare (image and file storage, backup storage, bot protection, and content delivery), Resend (email delivery, including any document you choose to email to yourself), Google (sign-in, if you use it), and PostHog (product analytics and session recordings, unless you turn analytics off in Cookie preferences — usage events and recordings are processed by PostHog in the United States). Our databases and server-side error monitoring run on our own infrastructure, so your account and document records are not held by a third-party database host, and those error reports are not shared with a third-party monitoring provider; unless you turn analytics off, technical errors that occur in your browser are reported to PostHog so we can find and fix them.
• Services that load in your browser: some features connect from your device directly to a third party, which receives your IP address. We use Google Fonts to display our typefaces on each page, and Clearbit to suggest company names and logos in the employer field. The company name you type there is sent to Clearbit to return suggestions.
• Our bank: if you pay us by bank transfer, our bank processes that payment and receives the details of the transfer.
• At your direction: when you create a public share link or otherwise choose to make a document available.
• Legal and safety: when we reasonably believe disclosure is needed to comply with the law or a valid legal request, or to protect the rights, safety, and security of our users, the public, or Resumarc.
• Business transfers: if Resumarc is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

Some features let you publish a resume or cover letter through a public link. Anyone with the link can view what you shared without signing in, and search engines may index it. Only share links with people you intend to give access to.

You can disable a share link at any time. Copies that others have already saved may remain outside our control.

We keep your personal information for as long as your account is active or as needed to provide the Services. When you request account deletion, your account is deactivated immediately and held for a 30-day grace period during which you can restore it using the link we email you. If you do not restore it within 30 days, we permanently delete your account details and content, such as your resumes and cover letters, and a short-lived operational record of the deletion is removed within a further 7 days. We keep records of purchases in an anonymised form, no longer linked to you, where we need them to meet legal, tax, and accounting obligations. Aside from that, we delete or anonymise your personal information within a reasonable period, except where we need to keep it to resolve disputes, prevent fraud, or enforce our agreements. Residual copies may remain in routine backups for a limited time.

We use appropriate technical and organisational measures designed to protect your personal information against loss, misuse, and unauthorised access, including encryption in transit and hashing of passwords. Our staff look at the contents of your account only when that is needed to provide something you asked for, such as preparing a document for you or answering a support request, to keep the Services secure, or when the law requires it. When we add a document or a Pass to your account by hand, we keep an internal record of who did it and when. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Resumarc and our service providers may process your information in countries other than the one where you live, including the United States. Where we transfer personal information across borders, we take steps to ensure it remains protected in line with this Policy and applicable law.

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, to object to certain processing, and to withdraw consent where we rely on it. You also have the right to lodge a complaint with your local data protection authority.

You can view and update much of your information directly in your account settings, or exercise your rights by emailing us at support@resumarc.com. You can unsubscribe from optional emails using the link in any such message. We may need to verify your identity before acting on a request.

The Services are not intended for children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

The Services may link to third-party websites and services that we do not control. This Policy does not apply to them, and we are not responsible for their privacy practices. Please review their policies before sharing your information.

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after the changes take effect means you accept the updated Policy.

The controller of your personal information is Resumarc Limited, a private company limited by shares with company registration number RC 9810124.

If you have questions about this Policy or how we handle your information, contact us at support@resumarc.com or visit our Contact page.