Privacy Policy

Introduction

Welcome to ResumeZeus ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our resume builder application. This Privacy Policy explains how we collect, use, and protect your information.

Information We Collect

Information You Provide

When you use our resume builder, you may provide personal information including:

• Name and contact information (email, phone, address)
• Professional experience and employment history
• Educational background
• Skills, certifications, and achievements
• Any other information you choose to include in your resume

Automatically Collected Information

We may collect certain information automatically when you use our service:

• Browser type and version
• Device type and operating system
• Usage patterns and feature interactions (anonymized)
• Error logs for debugging purposes
• Hashed IP addresses and device fingerprints, used solely for rate limiting and abuse prevention (retained up to 30 days; processed via Upstash)

How We Use Your Information

We use the information we collect to:

• Provide and maintain our resume builder service
• Generate PDF exports of your resume
• Improve our application based on usage patterns
• Fix bugs and technical issues
• Respond to your inquiries and support requests

Legal Basis for Processing (GDPR Art. 6)

Data Storage

Storage Model: Resume data is stored locally in your browser and, when you are signed in, in secure cloud storage for sync and recovery.

• Local browser storage is used for fast editing and draft persistence
• Signed-in accounts sync resume data to cloud storage to support cross-device access
• AI features process selected resume and job-description content on our servers
• Clearing browser data removes local copies, but cloud-synced data remains in your account

Export Files: When you export your resume (PDF or JSON), the file is generated in your browser and downloaded directly to your device.

Cookies and Tracking

We use minimal cookies and similar technologies:

• Essential Cookie: We use rf_cookie_consent to remember your analytics preference
• Analytics (Consent-Based): Vercel Analytics and public resume analytics are enabled only after explicit consent
• No Advertising Cookies: We do not use cookies for advertising purposes
• Consent Control: You can accept, reject, or save per-category preferences from the cookie banner

Data Security

We implement appropriate security measures to protect your information:

• HTTPS encryption for all data transmission
• Server-side access controls for account data
• Regular security updates and monitoring
• No storage of sensitive data like passwords on our servers

Your Rights

You have the following rights regarding your data:

• Access: View and manage your resume data in-app at any time
• Export: Download your data as JSON at any time
• Delete: Delete resumes/account data and clear local browser storage
• Portability: Export and import your data freely

Third-Party Services

We may use the following third-party services:

• Google AI (Gemini): AI features send resume content (experience, skills, job descriptions) to Google's Gemini API for processing. Direct identifiers (name, email, phone, URLs) are stripped before transmission by default. Data is processed under Google's Cloud Data Processing Addendum and is not used to train Google's models.
• Firebase: Authentication and cloud data storage
• Vercel: Hosting and deployment
• Upstash (Redis KV): Stores hashed IP-based rate-limit counters for abuse prevention
• Sentry: Error monitoring with data minimization controls

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

GDPR Rights (EU/EEA)

Under Regulation (EU) 2016/679 (GDPR), you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — correct inaccurate personal data
• Right to erasure ("right to be forgotten") — request deletion of your personal data where applicable
• Right to data portability — export your data in a structured format
• Right to restriction of processing — request limited processing in specific circumstances
• Right to object — object to certain processing activities
• Rights related to automated decision-making — request safeguards where automated decisions apply

To exercise these rights, email privacy@resumezeus.app. We respond within 30 days.

Data Retention

We keep personal data for as long as your account remains active or as needed to provide the service.

• When an account is deleted, account data (profile, resumes, cover letters, public links, username, and related data) is removed through a dedicated server-side deletion flow
• Public resume analytics events are retained for up to 30 days and then automatically removed
• Pseudonymized anti-abuse signals (hashed IP/device identifiers) are retained for up to 30 days
• Temporary anti-abuse blocks expire automatically after 24 hours

Irreversibly anonymized aggregate data may be retained for operational statistics.

Data Controller and Supervisory Authority

The data controller is AXTECH CONSULTING S.R.L., with registered office at București Sectorul 4, Strada Cap. Marin Grigore nr. 18, Parter, Bloc 4, Scara 1, Ap. 7.

If you believe your GDPR rights have been infringed, you may lodge a complaint with the Romanian supervisory authority:

• ANSPDCP — Romanian National Supervisory Authority for Personal Data Processing: www.dataprotection.ro

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and bumping the policy version when the change is material.

Contact Us

For privacy, data protection, or GDPR requests, contact privacy@resumezeus.app. For general product support, you can still reach us at support@resumezeus.app.