Back to home
FR-LEGAL-PRIV-01

PRIVACY POLICY

Effective: 10 May 2026·Last updated: 10 May 2026·Operator: my-resume.in

my-resume.in ("we", "us", "the Service") is a personal-project resume builder that helps you store your professional profile once and generate ATS-optimised, tailored resumes from it. This Privacy Policy explains what we collect, why, and the rights you have over your data. We try to keep this human-readable — if anything is unclear, email us (see section 11).

01Overview

The Service is operated by an individual developer based in India and made available to users worldwide. We are the data controller for the personal data you submit. We collect only what we need to operate the resume generator, and we do not sell your data to anyone. Ever.

02Data we collect

We collect the following categories of data, all of which you knowingly provide or are technically required to operate the Service:

  • Account data: name, email address, hashed password (bcrypt). If you sign in with Google, we receive your Google account email, name, profile picture URL and a Google ID — never your Google password.
  • Profile data: everything you fill in on the Profile Hub — personal details, education, work experience, internships, skills, projects, certifications, languages, achievements and links (LinkedIn, GitHub, portfolio).
  • Resume artefacts: uploaded resume PDFs, parsed text, generated LaTeX source, compiled PDFs and the metadata associated with each build.
  • Job descriptions: any JD text you paste in for AI tailoring.
  • Usage telemetry: pageviews, route timings, browser/OS user-agent string, approximate locale and a randomly generated session ID. We do not store precise IP addresses with your account.
  • Support communications: if you email us, we keep the message thread.

03How we use your data

We use the data above only to:

  • authenticate you and keep your session alive;
  • store your profile so you can generate unlimited resumes from it;
  • compile resumes, render previews, and let you download PDFs;
  • send your job description to our AI provider so it can tailor a resume to it (see section 05);
  • diagnose bugs, monitor performance and improve the product;
  • respond to support requests.

We do not use your profile data to train AI models, and we do not run ads.

04Storage & retention

Data is stored in our managed database and object storage. Compiled PDFs and uploaded resumes are kept until you delete them or close your account. Account and profile data are kept for as long as your account is active. When you delete your account from the Profile Hub → Account page, we permanently remove your account, profile, all resumes and JD data within 30 days from primary storage. Encrypted backups are rotated within 90 days.

05Sharing & third parties

We share data only with the sub-processors needed to run the Service:

  • Cloud hosting & database — to store account, profile and resume data.
  • AI provider (e.g. OpenAI / Anthropic / Google AI) — when you tailor a resume to a job description, the relevant profile fields and the JD text are sent to the model provider for inference. We do not authorise providers to train on this data where that option is available.
  • Google OAuth — only if you choose Google sign-in.
  • LaTeX compiler — runs in our infrastructure (Docker); your data is not sent to a third party for compilation.
  • Legal authorities — only if compelled by valid legal process.

We never sell, rent, or trade your personal data.

06Cookies & tracking

We use a single first-party HTTP-only session cookie to keep you logged in. We use minimal, first-party usage telemetry (pageviews, route paths) to understand how the product is used. We do not use third-party advertising cookies, fingerprinting, or cross-site trackers.

07Your rights

You can, at any time:

  • Access & correct your profile data directly from the Profile Hub.
  • Export your generated resumes as PDF.
  • Delete individual resumes or job descriptions from the dashboard.
  • Delete your entire account from Profile Hub → Account → Delete Account.
  • Withdraw consent for AI-tailoring by simply not pasting a job description.

Under applicable laws (GDPR / India's DPDP Act, 2023 / CCPA), you may also have the right to data portability, restriction of processing, and to lodge a complaint with a supervisory authority. Email us to exercise any of these rights.

08Security

Passwords are hashed with bcrypt. Sessions use HTTP-only, signed cookies over HTTPS. We follow least-privilege access on our infrastructure and patch dependencies regularly. No system is perfectly secure, however, and we cannot guarantee absolute security. Please use a strong, unique password and keep it private.

09Children

The Service is not directed at children under 16. If you believe a minor has created an account, contact us and we will remove the account.

10Changes

We may update this policy as the product evolves. Material changes will be highlighted on the home page or via email. The "Last updated" date at the top always reflects the current version.

11Contact

Questions, deletion requests, or anything else — email info@zevo-works.in. We aim to respond within 5 working days.