Privacy Policy
Last updated October 14, 2026
Resumai helps you build an experience bank once and generate resumes tailored to specific jobs. This policy explains what we collect, why, who helps us process it, and how you can delete it. We keep it short and plain on purpose.
What we collect
- Account details. Your email address. If you sign up with a password, it is stored only as a secure hash by our authentication provider and never in readable form. If you sign in with Google, we receive your email address and basic profile (name and profile picture) and nothing else.
- Resume content you give us. The text extracted from a resume you upload, your answers during the setup interview, and the experience bank built from them (education, roles, projects, skills, certifications). We read the uploaded file to extract its contents and do not keep the original file.
- Job descriptions and generated resumes. Job descriptions you paste, the tailored resumes we generate, and their PDF files.
- Credits and purchases. Your credit balance and a record of credit packs you buy. Payment card details are handled by Stripe and never reach our servers.
- Usage records. Counts and timestamps of generations, used to enforce daily limits and track our own costs.
How we use it
Only to provide Resumai: to build and tailor your resumes, run your account and credits, send account emails such as sign-up confirmation, and prevent abuse. We do not sell your data, we do not show ads, and we do not use your content to train our own models.
Who processes it for us
We rely on a small number of service providers, each of which handles data only to deliver its part of the service:
- Supabase: database, authentication, and file storage.
- Anthropic: reads your uploaded resume and generates resume text. Content is sent per request. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
- Stripe: payment processing.
- Vercel: website hosting.
- Render: converts generated resumes into PDF files.
- Resend: delivers account emails.
Google sign-in
If you choose “Continue with Google,” we request only the openid, email, and profile permissions. We use that information solely to create and sign you in to your Resumai account. We do not access your Gmail, contacts, Drive, or any other Google data, and we do not share or transfer Google user data to anyone except as needed to provide sign-in. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Cookies
We use cookies only to keep you signed in. We do not use advertising or cross-site tracking cookies.
Retention and deletion
We keep your data for as long as your account exists. You can delete individual resumes at any time from inside the app. To delete your account and everything associated with it, email uddin.moiz@gmail.com from the address on your account and we will remove it. Payment records may be kept where the law requires it.
Security
Data is encrypted in transit, access to your records is restricted to your own account at the database level, and service keys never reach the browser. No system is perfectly secure, but we work to protect your information.
Children
Resumai is not intended for anyone under 16.
Changes
If we change this policy, we will update the date above. Material changes will be announced in the app or by email.
Contact
Questions or requests: uddin.moiz@gmail.com