Privacy Policy

01The short version

• We collect your account details, the documents you build, and your purchase records.
• Document content is encrypted at rest. With Enhanced encryption, even we can’t read it.
• We never sell your personal data, and we never use your content to train AI models.
• We run no advertising trackers. Card numbers are handled by Stripe, not stored by us.
• You can export or delete your data at any time. Questions: contact@resume-get.com.

02Who is responsible for your data

The data controller is Cloudtech Consulting Sp. z o.o., a company registered in Poland with its registered office at ul. Marynarska 13, 02-674 Warsaw, Poland (NIP 5213964457), operating the Service as “ResumeGet”. For any privacy question or request, contact contact@resume-get.com.

03What we collect

• Account data — your name and email address, and a securely hashed version of your password (we never store your password in readable form).
• Document content — the resumes, cover letters, contact details, summaries, and job analyses you create. This is encrypted at rest (see How your content is protected).
• Purchase records — what you bought, the amount and currency, and Stripe transaction identifiers. We do not receive or store your full card number; Stripe handles payment details.
• Technical and usage data — your IP address and basic request data, used for security, abuse prevention, and rate limiting; and minimal server logs needed to operate the Service.
• Communications — if you email us, we keep that correspondence to answer you.

04How we use it

• To provide the Service: build, check, store, and export your documents.
• To run AI actions you request (see AI processing).
• To take payment, deliver purchases, and email you files you bought.
• To secure the Service — detect and prevent abuse, fraud, and unauthorized access.
• To meet legal, tax, and accounting obligations and respond to lawful requests.

05Legal bases (for EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service you signed up for); legitimate interests (to keep the Service secure and working, and to prevent abuse); legal obligation (to retain financial records); and consent where we ask for it. You can withdraw consent at any time.

06Cookies & local storage

We use the minimum needed to run the site — no advertising or cross-site tracking cookies.

• rf_session— an essential, HTTP-only cookie that keeps you signed in. Without it you can’t log in.
• rg_theme — remembers your light/paper/dark theme choice.
• A small amount of browser local storage remembers UI state, such as whether you dismissed the Enhanced-encryption suggestion. It stays on your device.

07How your content is protected

Your document content is encrypted at rest with a per-account key. There are two modes:

• Standard — we hold a key that can decrypt your data, so we can show it to you on any device and recover it if you forget your password. Staff access is restricted and limited to operating the Service.
• Enhanced — your key is derived from your password, and we keep no copy. We can decrypt your content only while you are signed in; at rest it is unreadable to us. The trade-off: if you lose your password, the data cannot be recovered by anyone.

08Service providers we share data with

We use a small number of processors to run the Service. They act on our instructions and only for these purposes:

• Stripe — payment processing. Stripe receives the payment details you enter at checkout.
• Mailjet — sending transactional email, such as a file you purchased. Mailjet receives the recipient address and message.
• Our AI provider — when you run an AI action, the relevant text is sent to the configured model to generate the result (see below).
• Hosting & database providers — to run the application and store data.

We do not sell, rent, or trade your personal data to anyone.

09AI processing

When you ask for an AI action (a summary, a rewrite, a cover letter, or tailoring against a job description), the text needed for that request — which may include parts of your resume and a job description you paste — is sent to the configured AI model to produce the result, then returned to you. Your content is not used to train AI models. The model provider is configured by the operator and may run locally or as a hosted service.

10How long we keep data

• Account and document data — kept while your account exists. When you delete your account, your documents and personal profile are deleted.
• Purchase records — kept even after account deletion, with personal delivery details removed, because we are required to retain financial records and to reconcile them with Stripe. They may be produced in response to a lawful request such as a court order.
• Backups — routine backups rotate out over time on their own schedule. We do not trawl backups or selectively delete individual records from them.

11International data transfers

Our providers (such as Stripe, Mailjet, and hosting or AI services) may process data in countries other than yours. Where required, transfers are covered by appropriate safeguards such as standard contractual clauses.

12Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, to object to certain processing, and to complain to your data-protection authority. You can build, export, and delete your documents directly in the app, and delete your account from settings. For anything else, email contact@resume-get.comand we’ll respond. We won’t discriminate against you for exercising these rights.

13Children

The Service is not directed to children under 16, and we don’t knowingly collect their data. If you believe a child has given us personal data, contact contact@resume-get.com and we will delete it.

14Security

We protect data in transit and at rest, hash passwords, encrypt document content, restrict internal access, and rate-limit sensitive endpoints. No system is perfectly secure, but we take reasonable steps and keep improving them. If we ever experience a breach affecting your data, we will notify you and the relevant authorities as required by law.

15Changes to this policy

We may update this policy. When we make material changes we’ll update the “Last updated” date above and, where appropriate, notify you. Continuing to use the Service after a change means you accept the updated policy.

16Contact

For any privacy question or request, email contact@resume-get.com.