Privacy Policy

This Privacy Policy explains how maketheresume.co ("maketheresume.co," "we," "us," or "our") collects, uses, discloses, transfers, stores, and protects personal information when you visit our website, create an account, start a trial, purchase a subscription, build, edit, import, export, store, or share resumes, cover letters, job application materials, and other career documents, use AI-assisted writing features, or otherwise interact with our services (collectively, the "Service").

This Privacy Policy is designed for a digital software service offered to users in the United States, United Kingdom, Canada, the European Economic Area, and other markets where the Service is available. It should be read together with our Terms of Service, Refund Policy, cookie notices, and any product-specific notice or consent flow that applies to your use of the Service.

1. Scope

This Privacy Policy applies to:

● Visitors to our websites, landing pages, and help pages.

● Individuals who create accounts, start trials, or purchase subscriptions.

● Individuals who create, upload, import, edit, export, download, or share resumes, cover letters, application answers, personal statements, or related career materials through the Service.

● Individuals who contact sales, support, billing, privacy, or legal teams.

● Individuals whose personal information is included in resumes, cover letters, references, application documents, or uploaded files processed through the Service.

This Privacy Policy does not apply to third-party websites, payment processors, job boards, browser extensions, AI providers, analytics providers, cloud storage providers, or integrations that we do not control. Those services are governed by their own terms and privacy policies.

2. Our Roles

For website operations, account registration, billing, analytics, marketing, security, support, and business operations, maketheresume.co generally acts as an independent controller or business.

For resume, cover letter, and application content that users upload or create through the Service, maketheresume.co generally acts as a controller for individual users and may act as a processor or service provider where the Service is provided under an organization, school, recruiter, employer, or enterprise arrangement.

If your personal information appears in a document uploaded by another user or organization, you may need to contact that user or organization first. We will assist as required by law and our contractual obligations.

3. Information We Collect

We collect personal information from you, from your use of the Service, from payment and service providers, and from other sources you choose to connect or upload.

3.1 Account and Identity Information

We may collect your name, email address, username, password or authentication credentials, country, language, time zone, account preferences, and account identifiers.

3.2 Resume, Cover Letter, and Career Information

We may collect information that you upload, import, enter, generate, revise, or store in the Service, including:

● Full name and contact details.

● Job title, professional summary, career goals, and biography information.

● Employment history, education history, certifications, awards, projects, publications, portfolios, and skills.

● Cover letters, job application answers, job targeting inputs, and role preferences.

● Uploaded files such as resumes, CVs, PDFs, Word documents, and related materials.

● Reference information you choose to provide.

● Website, portfolio, LinkedIn, GitHub, or other profile links.

3.3 Sensitive or High-Risk Personal Information

Resume and job application content can contain information that may be considered sensitive or high-risk depending on the jurisdiction and context, such as ethnicity indicators, disability references, veteran status, immigration or work authorization status, age-related information, or other protected-category information if you choose to include it.

We ask that you avoid including unnecessary sensitive personal information unless you decide it is required for your own application purposes.

3.4 Billing and Commercial Information

We may collect plan type, billing address, tax information, subscription status, payment status, invoice details, renewal details, cancellation details, refund history, and transaction records. Payment card data is processed by our payment processor. We do not intentionally store full payment card numbers on our own systems.

3.5 Usage, Device, and Log Data

We may collect IP address, browser type, device type, operating system, referrer URL, page views, feature usage, clickstream data, session duration, approximate geolocation derived from IP address, error logs, crash information, and security logs.

3.6 Cookies and Tracking Technologies

We use cookies, pixels, local storage, SDKs, and similar technologies for essential website functions, authentication, security, preferences, analytics, attribution, and marketing where permitted by law.

3.7 AI Feature Data

If you use AI-assisted resume drafting, rewriting, optimization, summarization, or job-tailoring features, we may process prompts, uploaded files, resume content, cover letter content, job descriptions, editing instructions, generated outputs, metadata, and usage signals to provide the requested feature, prevent abuse, improve quality, and maintain safety.

We do not use private user documents to train public or shared AI models unless we separately disclose that use and obtain any consent required by applicable law.

3.8 Communications and Support Information

We may collect messages, support requests, attachments, chat transcripts, meeting notes, survey responses, and other information you provide when communicating with us.

3.9 Information From Third Parties

We may receive information from payment processors, analytics providers, marketing partners, AI vendors, fraud prevention providers, authentication providers, and other service providers that support the Service.

4. How We Use Information

We may use personal information for the following purposes:

● To provide, operate, maintain, secure, and improve the Service.

● To create and manage accounts and authenticate users.

● To let you create, store, edit, organize, export, and share resumes and related documents.

● To power AI-assisted drafting, rewriting, formatting, tailoring, and resume optimization features.

● To process subscriptions, invoices, renewals, cancellations, taxes, payment verification, and refunds.

● To provide support, onboarding, troubleshooting, and service communications.

● To monitor security, detect fraud, prevent abuse, and enforce our Terms of Service.

● To analyze usage, improve product design, test features, and understand performance.

● To send marketing communications where permitted by law and consistent with your preferences.

● To comply with legal obligations and protect our rights, users, systems, and business.

5. Legal Bases for EU and UK Processing

Where GDPR, UK GDPR, or similar laws apply, we rely on the following legal bases:

● Account creation, resume creation tools, subscription management, support: Performance of a contract.

● Billing, tax records, compliance, legal obligations: Legal obligation.

● Security, fraud prevention, service improvement, internal analytics, business operations: Legitimate interests.

● Non-essential cookies, certain marketing messages, optional AI or experimental features where required: Consent.

● Protection of users or others in urgent situations: Vital interests or legitimate interests, depending on context.

Where we rely on legitimate interests, we consider the impact on your rights and freedoms.

Where we rely on consent, you may withdraw consent at any time without affecting earlier processing.

6. How We Disclose Information

We may disclose personal information to:

● Service providers and subprocessors supporting hosting, analytics, billing, cloud infrastructure, email delivery, customer support, security, authentication, AI features, storage, and document generation.

● Payment processors and billing platforms.

● Professional advisors, including lawyers, auditors, consultants, insurers, and accountants.

● Law enforcement, regulators, courts, or other parties where required by law or necessary to protect rights, safety, or security.

● Potential transaction counterparties in a merger, acquisition, financing, asset sale, or reorganization.

● Affiliates under common ownership or control.

We do not publish or share your resumes or personal documents publicly unless you choose to export, share, or publish them.

We require service providers to process personal information only for authorized purposes and to protect it using appropriate safeguards.

7. Sale, Sharing, and Targeted Advertising

We do not sell personal information for money.

Some U.S. privacy laws define "sale," "sharing," or "targeted advertising" broadly enough to include certain advertising or analytics activities. Where required by law, we provide a way to opt out of those activities.

We do not knowingly sell or share personal information of individuals under 16 years of age.

8. Cookies and Consent

Essential cookies are used for login, security, fraud prevention, preferences, and core website functionality.

Non-essential cookies, including analytics, advertising, and personalization technologies, are used only where permitted by law. In the EEA, UK, and other consent-based jurisdictions, we request consent before placing non-essential cookies.

You can manage cookie choices through our cookie banner, preference tools, browser settings, or other controls we make available.

9. International Data Transfers

We may process and store personal information in the United States, the European Economic Area, the United Kingdom, Canada, and other countries where we or our service providers operate.

Where required, we rely on recognized safeguards such as standard contractual clauses, the UK International Data Transfer Addendum, adequacy decisions, data processing terms, and other lawful transfer mechanisms.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

General retention principles:

● Account information is retained while the account is active and for a reasonable period afterward.

● Billing and tax records are retained as required for accounting, legal, and compliance purposes.

● User-created resumes and documents are retained while the account remains active and for a limited period after closure to support export, backup, and deletion cycles.

● Security logs are retained for a reasonable period to investigate abuse and incidents.

● Marketing data is retained until you unsubscribe, object, or it is no longer needed.

Backup copies may remain for a limited period according to standard backup practices.

11. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption in transit where appropriate, authentication measures, logging, monitoring, vendor review, and incident response procedures.

No system can guarantee absolute security. You are responsible for protecting account credentials, controlling access to your exported files, and avoiding unnecessary inclusion of sensitive information in documents.

12. Your Privacy Rights

Depending on your location, you may have rights to:

● Access personal information.

● Correct inaccurate personal information.

● Delete personal information.

● Restrict or object to processing.

● Receive a portable copy of personal information.

● Withdraw consent.

● Opt out of marketing communications.

● Opt out of sale, sharing, targeted advertising, or certain profiling where applicable.

● Limit use or disclosure of sensitive personal information where applicable.

● Appeal a privacy request decision where required by law.

● Lodge a complaint with a regulator or data protection authority.

To exercise rights, contact [email protected].

We may verify your identity before responding. Authorized agents may submit requests where permitted by law, but we may require proof of authorization.

13. U.S. State Privacy Notice

Residents of California and certain other U.S. states may have additional rights under applicable privacy laws, including rights to know, access, correct, delete, opt out, and not be discriminated against for exercising privacy rights.

We will not discriminate against you for exercising legally protected privacy rights.

Categories of personal information we may collect include identifiers, commercial information, internet activity information, approximate geolocation derived from IP, professional or employment-related information, uploaded document content, communications, and sensitive personal information where necessary for account operation or where you choose to include it in resume materials.

14. Canada Privacy Notice

For Canadian users, we collect, use, and disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances and with consent where required by law.

You may request access to or correction of personal information or submit a privacy complaint by contacting [email protected].

15. EU and UK Privacy Notice

If you are located in the EEA or UK, you may contact us at [email protected] to exercise GDPR or UK GDPR rights.

If required by law, we will identify any EU or UK representative in a supplemental notice.

You may also lodge a complaint with your local supervisory authority.

16. Marketing Communications

You may opt out of marketing emails by using the unsubscribe link or contacting us. We may still send non-marketing communications such as billing notices, security messages, service changes, and support communications.

Where applicable law requires consent for commercial electronic messages, we will seek that consent or rely on another lawful basis before sending them.

17. Children

The Service is intended for individuals who are at least 16 years old or the minimum age required in their jurisdiction to use the Service. Individuals under 16 may not use the Service.

We do not knowingly collect personal information from children under 16.

If you believe a child has provided personal information to us, contact [email protected] and we will take appropriate steps.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will provide notice by updating this page, emailing users, posting in-product notice, or using another legally appropriate method.

19. Contact

Support email: [email protected]