Privacy Policy
Last updated: July 14, 2026
1. Who controls your data
ResumeGenCV is an independently operated online resume service. In this policy, "ResumeGenCV," "we," "us," and "our" refer to the independent operator of resumegencv.com and app.resumegencv.com. The operator is the controller of the personal data described in this policy.
MySuperResume is a ResumeGenCV product developed and managed by the same independent developer. Data collected through MySuperResume is governed by the MySuperResume Privacy Policy unless this policy expressly says otherwise.
Privacy questions and requests can be sent to support@resumegencv.com. You can also find ResumeGenCV on X and LinkedIn.
This policy applies when you visit our websites, create an account, use our tools, or buy Premium access.
2. Personal data we collect
- Account data: your name, email address, account identifiers, login or verification information, membership status, and, if you choose Google Sign-In, the basic account information Google provides to authenticate you.
- Documents and content: resumes, CVs, cover letters, job descriptions, work history, education, skills, contact details, uploaded files, interview-practice content, prompts, feedback, and AI-generated results. This content may include information about other people, such as references, so only provide it when you are entitled to do so.
- Payment and transaction data: the product purchased, amount, currency, country or region used for purchasing-power-parity pricing or tax, payment status, date, and Stripe transaction identifiers. Stripe collects and processes payment-card or other payment-method details; ResumeGenCV does not receive your complete card number.
- Technical and usage data: IP address, browser and device type, operating system, approximate location derived from IP, referring page, pages and features used, timestamps, screen and window dimensions, cookie or device identifiers, error information, and interaction data such as clicks, scrolling, and session playback with sensitive form fields intended to be masked.
- Communications: messages, support requests, attachments, and related contact information when you contact us.
- Data stored on your device: the application may use browser storage for document drafts, active-document identifiers, preferences, and other data needed to provide the service.
Resume content can reveal sensitive information. Avoid adding health, political, religious, biometric, or other highly sensitive data unless it is necessary for your document and you accept that it will be processed as described here.
3. Why we use personal data
| Purpose | Typical legal basis |
|---|---|
| Create and manage accounts; save, synchronize, generate, email, and download documents; provide scoring, matching, interview practice, and support. | Performance of our contract with you. |
| Process one-time payments, activate Premium access, prevent payment fraud, provide receipts, and handle refunds. | Performance of our contract and compliance with legal obligations. |
| Secure the service, prevent abuse, enforce limits and terms, diagnose errors, and maintain reliable operations. | Our legitimate interests in protecting and operating the service and, where relevant, legal obligations. |
| Understand traffic, feature usage, and user experience through Google Analytics, Microsoft Clarity, and first-party analytics so we can improve the service. | Your consent where required for analytics cookies or similar technologies; otherwise, our legitimate interests where permitted by law. |
| Respond to requests, protect legal rights, keep required transaction records, and comply with lawful requests. | Performance of our contract, legal obligations, and legitimate interests. |
We do not use AI output to make legal or similarly significant decisions about you. Resume scores and suggestions are informational tools, not hiring decisions.
4. AI processing
ResumeGenCV uses an open-source AI model that we self-host on infrastructure supplied by our hosting providers. Content submitted to AI features is processed to produce the result you request rather than being sent to a third-party commercial AI API.
AI output may be incomplete, inaccurate, or unsuitable. Review it before using it and do not submit information that is unnecessary for your request.
5. Service providers and disclosures
We do not sell your personal data. We disclose data only as needed to operate the service, complete transactions, comply with law, or protect rights. Our main providers are:
- Amazon Web Services (AWS): website and cloud infrastructure, content delivery, storage, and related technical services.
- Hetzner: server, hosting, compute, and related infrastructure, including infrastructure used for self-hosted AI processing.
- Stripe: checkout, payment processing, fraud prevention, transaction records, and refunds.
- Google: Google Analytics for traffic and usage measurement and Google Sign-In when you choose that login method.
- Microsoft Clarity: interaction analytics, heatmaps, diagnostics, and session playback. Sensitive input content is intended to be masked before it is uploaded to Clarity.
- CookieHub: presentation and management of cookie choices.
These providers process data under their own terms and privacy documentation. They may use affiliates and subprocessors. We may also disclose information to professional advisers, authorities, courts, or other parties when reasonably necessary to comply with law, address fraud or security, enforce our terms, or establish and defend legal claims. If the service is transferred to a new operator, relevant data may transfer with it subject to this policy and applicable law.
6. Cookies and similar technologies
We use essential cookies and browser storage for authentication, security, document editing, and preferences. We also use Google Analytics and Microsoft Clarity to understand use of the service. Clarity may use pseudonymous identifiers and capture page interactions for heatmaps and session playback; sensitive form fields are intended to be masked.
Where required, non-essential analytics technologies are controlled through the cookie choices presented on the site. You can revisit those choices through the cookie settings made available on the site and can also block or delete cookies through your browser. Blocking essential storage may prevent parts of the service from working. Google also offers a browser add-on for opting out of Google Analytics.
7. International data transfers
Our providers may process data in the European Economic Area and in other countries, including the United States. When data is transferred outside the EEA, UK, or Switzerland, we rely on the provider's applicable transfer mechanism, such as an adequacy decision, the EU Standard Contractual Clauses, or another lawful safeguard.
8. How long we keep data
- Account data and user content are generally kept while your account is active and as needed to provide the service.
- You can delete your account and associated ResumeGenCV content from Account → Delete Account. Deletion removes the account and its user content from active systems, subject to the limited exceptions below.
- Deleted information may remain temporarily in restricted backups until those backups are overwritten or expire. We do not restore deleted account content to ordinary production use.
- Payment, refund, tax, fraud-prevention, security, and dispute records may be retained for the period required by law or reasonably needed to establish or defend legal claims.
- Analytics data is retained according to our configured retention settings and each analytics provider's retention rules, after which it is deleted or aggregated.
We may retain information that has been irreversibly anonymized because it no longer identifies you.
9. Your privacy rights
Depending on where you live, you may have rights to:
- access and receive a copy of your personal data;
- correct inaccurate or incomplete data;
- delete data or restrict its processing;
- receive certain data in a portable format;
- object to processing based on legitimate interests;
- withdraw consent at any time, without affecting earlier lawful processing; and
- complain to your local data-protection authority.
To exercise a right, email support@resumegencv.com. We may need to verify that the request relates to your account. Rights can be limited where an exemption applies, including when records must be kept by law.
10. Security
We use reasonable technical and organizational safeguards designed to protect personal data, including encrypted network connections and access controls. No online service is completely secure, so we cannot guarantee absolute security. Keep control of your email account and contact us if you suspect unauthorized use.
11. Children
ResumeGenCV is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided personal data, contact us so we can investigate and delete it where appropriate.
12. Changes to this policy
We may update this policy as the service or law changes. We will post the revised policy here and change the date above. If a change materially affects how we use existing personal data, we will provide additional notice when required by law.
13. Contact
Email: support@resumegencv.com
X: @resumegencv
LinkedIn: ResumeGenCV