Privacy Policy

Who controls your data

ResumeForge, a sole proprietorship based at Address not configured — set NEXT_PUBLIC_BUSINESS_ADDRESS, India, is the Data Fiduciary for the information described here under the Digital Personal Data Protection Act, 2023. For any question or request about your data, write to support@example.com — that address also serves as our grievance contact.

What we collect

• Account data — your name, email address and a securely hashed password. We never store your password in readable form.
• Resume content — everything you type into the editor: contact details, work history, education, skills, and any photo you add.
• Payment records— the plan you bought, the amount, and Razorpay’s order and payment identifiers. We never receive or store your card number, CVV, UPI PIN or bank credentials.
• Technical data — IP address and basic request metadata, used for rate limiting and abuse prevention.

Why we use it

• To let you sign in and to save and render your documents.
• To process payments and unlock the features you paid for.
• To protect the service from abuse and fraud.
• To reply when you contact support.

We do not sell your personal data, and we do not use your resume content to train AI models.

AI processing

When you use an AI feature, the relevant part of your resume — for example a job title, a role description or a target job description — is sent to Google’s Gemini API to generate the suggestion. Only what is needed for that request is sent, and it is sent over an encrypted connection. Google processes it under their API terms. If you would rather not have any content leave the app, simply do not use the AI buttons; every other part of the builder works without them.

Who else processes your data

• Razorpay — payment processing. Governed by their own privacy policy.
• Google (Gemini API) — AI text generation, as described above.
• Our hosting and database providers — storage and delivery of the application.

Cookies

We use a single essential cookie to keep you signed in. It is httpOnly, expires after 7 days, and is not used for advertising or cross-site tracking. There are no third-party tracking cookies on this site.

How long we keep it

Your resumes and account data are kept until you delete them or ask us to delete your account. Payment records are retained for as long as tax and accounting law requires, typically eight years.

Your rights

You can ask us to give you a copy of your data, correct it, or delete it entirely. Email support@example.com from your account address and we will act within 30 days. Deleting your account removes your resumes and cover letters permanently — export anything you want to keep first.

Security

Traffic is encrypted in transit. Passwords are hashed with bcrypt. Sessions are signed and stored in an httpOnly cookie. No system is perfectly secure, but if a breach ever affects your data we will tell you promptly.

Children

ResumeForge is not intended for children under 16. If you believe a child has given us personal data, contact us and we will remove it.