Privacy policy.

This Privacy Policy explains how Resumarc ("Resumarc", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use our website, resume and cover letter builder, templates, resume checker, AI features, and related services (together, the "Services"). Resumarc Limited, a private company limited by shares with registration number RC 9810124, is the controller of the personal information handled through the Services.

By using the Services you agree to this Policy. It should be read together with our Terms of Use. If you do not agree, please do not use the Services.

We collect the following categories of personal information:

• Account information: your email address, a hashed password if you set one, and how you sign in (email and password, Google, or a magic link).
• Profile information: details you choose to add, such as your name, phone number, location, and profile photo.
• Content you create: the information you put into your resumes and cover letters, including work history, education, skills, summaries, and any files you import, together with the answers you give when setting up a document, such as your career stage, seniority, job-search goal, and target job title. Cover letters may also include details you provide about a recipient, such as their name, company, and email address.
• Payment information: when you buy a Pass, our payment provider Polar processes the payment. Polar handles your card details; we receive limited information such as the purchase, the type of payment method, and your billing country.
• Usage information: how you interact with the Services, together with your IP address, which we use to run the Services and to protect sign-in and forms from automated abuse. Unless you turn analytics off, we also collect analytics events and session recordings through PostHog to understand how the Services are used.
• Cookies: small files used to keep you signed in, to protect our sign-in and forms from automated abuse, and, unless you turn it off, to run analytics. We do not use advertising or marketing cookies.
• Messages you send us: the content of your support requests and other communications.

We use your personal information to:

• provide, operate, and maintain the Services, including saving your documents and rendering live previews and exports;
• power AI features that generate, improve, score, or import content at your request;
• process payments, manage your Passes, and track your daily AI credits;
• send you service messages you cannot opt out of, such as security, account, and transaction notices;
• send optional product updates and tips, which you can unsubscribe from at any time;
• personalize your experience and remember your settings;
• understand and improve how the Services are used;
• keep the Services secure and detect, prevent, and investigate fraud, abuse, and breaches of our Terms;
• comply with our legal obligations and enforce our agreements.

When you use an AI feature, we send the relevant content you are working on (for example, the text of your resume, or a file you import) to the AI provider that powers that feature (currently OpenAI) so it can return the result to you. We use this provider only to deliver the feature you requested.

AI output can be inaccurate or incomplete, so please review it before you rely on it. Our Terms of Use explain more about AI-assisted content.

We use a small number of strictly necessary cookies, plus an analytics category that is on by default and can be turned off at any time. We do not use advertising or marketing cookies.

• Essential: to keep you signed in, to protect sign-in and forms from automated abuse, and to remember your cookie choices. These are required for the Services to work.
• Analytics (on by default, always your choice): we use PostHog to understand how the Services are used, covering the pages you visit, the features you use, session recordings of your visit, and technical errors that occur in your browser. Recordings mask what you type into form fields, but can include content shown on screen, such as your document preview, and may be analysed automatically to help us find and fix problems. We do not use analytics to build advertising profiles.

The cookie bar on your first visit lets you accept this or manage it, and you can change your choice at any time using the "Cookie preferences" link in the footer. Turning analytics off stops analytics and recordings immediately. Your display preferences, such as light or dark theme, are stored in your browser's local storage rather than in cookies. You can also block or delete cookies through your browser settings, though blocking essential cookies may stop you from signing in.

We do not sell your personal information. We share it only in these situations:

• Service providers: companies that help us run Resumarc under contract and may use your information only to provide services to us. They include Polar (payment processing), OpenAI (AI features — the resume or cover-letter content you submit, and any file you import, are sent to generate your result), Cloudflare (image and file storage, backup storage, bot protection, and content delivery), Resend (email delivery, including any document you choose to email to yourself), Google (sign-in, if you use it), and PostHog (product analytics and session recordings, unless you turn analytics off in Cookie preferences — usage events and recordings are processed by PostHog in the United States). Our databases and server-side error monitoring run on our own infrastructure, so your account and document records are not held by a third-party database host, and those error reports are not shared with a third-party monitoring provider; unless you turn analytics off, technical errors that occur in your browser are reported to PostHog so we can find and fix them.
• Services that load in your browser: some features connect from your device directly to a third party, which receives your IP address. We use Google Fonts to display our typefaces on each page, and Clearbit to suggest company names and logos in the employer field. The company name you type there is sent to Clearbit to return suggestions.
• At your direction: when you create a public share link or otherwise choose to make a document available.
• Legal and safety: when we reasonably believe disclosure is needed to comply with the law or a valid legal request, or to protect the rights, safety, and security of our users, the public, or Resumarc.
• Business transfers: if Resumarc is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

Some features let you publish a resume or cover letter through a public link. Anyone with the link can view what you shared without signing in, and search engines may index it. Only share links with people you intend to give access to.

You can disable a share link at any time. Copies that others have already saved may remain outside our control.

We keep your personal information for as long as your account is active or as needed to provide the Services. When you request account deletion, your account is deactivated immediately and held for a 30-day grace period during which you can restore it using the link we email you. If you do not restore it within 30 days, we permanently delete your account details and content, such as your resumes and cover letters, and a short-lived operational record of the deletion is removed within a further 7 days. We keep records of purchases in an anonymised form, no longer linked to you, where we need them to meet legal, tax, and accounting obligations. Aside from that, we delete or anonymise your personal information within a reasonable period, except where we need to keep it to resolve disputes, prevent fraud, or enforce our agreements. Residual copies may remain in routine backups for a limited time.

We use appropriate technical and organisational measures designed to protect your personal information against loss, misuse, and unauthorised access, including encryption in transit and hashing of passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Resumarc and our service providers may process your information in countries other than the one where you live, including the United States. Where we transfer personal information across borders, we take steps to ensure it remains protected in line with this Policy and applicable law.

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, to object to certain processing, and to withdraw consent where we rely on it. You also have the right to lodge a complaint with your local data protection authority.

You can view and update much of your information directly in your account settings, or exercise your rights by emailing us at support@resumarc.com. You can unsubscribe from optional emails using the link in any such message. We may need to verify your identity before acting on a request.

The Services are not intended for children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

The Services may link to third-party websites and services that we do not control. This Policy does not apply to them, and we are not responsible for their privacy practices. Please review their policies before sharing your information.

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after the changes take effect means you accept the updated Policy.

The controller of your personal information is Resumarc Limited, a private company limited by shares with company registration number RC 9810124.

If you have questions about this Policy or how we handle your information, contact us at support@resumarc.com or visit our Contact page.