Privacy Policy

1. What we collect

Account info: email, name (or basic profile from your Google account).

Resume content: the resume text, target role and job description (JD) you submit. For signed-in users, check history is stored under your account; anonymous checks are not stored in our database.

Transactions: subscription/purchase records (plan, amount, order id). Card details are handled by Waffo, our payment processor — we never see or store them.

Technical data: basic logs (IP, timestamps) for abuse prevention and troubleshooting.

2. How your resume is used (the important part)

Your resume is used for one thing only: generating your own report. To do that, the resume text and JD are sent to a third-party large-language-model service (Alibaba Cloud Bailian) for this analysis only.

We do not use your resume to train AI models, do not sell it to anyone, and do not show it to anyone but you.

3. Storing your original file

When you upload a resume file (PDF/Word/image) while signed in, we keep the original file itself in private object storage (Cloudflare R2) in addition to the extracted text, so you don't have to re-upload it when you re-check against a different role.

The bucket is private with no public links. Downloads go only through our own endpoint, which verifies on every request that you are signed in and that the file belongs to your account.

Original files are kept for 90 days from upload and then deleted automatically. Deleting a check from your history also deletes its original file immediately. Deletion is permanent.

If you use the Service without signing in, no original file is stored.

4. Third-party services we rely on

Hosting & database: Vercel (app hosting) and Neon (database), located in the United States.

AI analysis: Alibaba Cloud Bailian (LLM inference).

Payments: Waffo (Merchant of Record).

Email: Resend (verification and notification emails).

Bot protection: Cloudflare Turnstile.

Analytics: Microsoft Clarity (page views, clicks and session recordings, used to improve the product). Every piece of text on the resume checker — your resume and your report — is masked in recordings and heatmaps, so Clarity never receives your resume content.

Each processes only what it needs under its own privacy policy. Your data may be transferred across borders to where these services operate (primarily the US).

5. Cookies

We only use essential cookies: sign-in session, language preference, and human verification. No advertising or cross-site tracking cookies. See the Cookie Policy.

6. Retention & deletion

Your account and check history are kept while you use the Service. You can request deletion of your account and all associated data via the Contact page; we will complete it within a reasonable time (typically 7 business days).

7. Security

All traffic is encrypted over HTTPS; database access is credential-protected; payment credentials never touch our servers. No system is perfectly secure — if a breach affects your data, we will notify you promptly.

8. Your rights

You may access, correct, export or delete your personal data. Just ask via the Contact page (resumerx.app/en/contact).

9. Changes

Updates will be posted on this page with a new effective date; material changes will be flagged on the site.