Privacy Policy

1. Overview

Resumify ("we", "us", "our") respects your privacy. This policy explains what data we collect, how we use it, and your rights. By using resumify.cloud, you agree to this policy. You must be 13 years or older to use Resumify.

2. Data we collect

• Resume form data — name, contact details, work history, skills, and education you enter. This is held in your browser's local storage during your session. When you generate your resume, it is transmitted to Anthropic's API for AI processing (see section 3). It is never stored on our servers.
• Resume photo (optional) — if you upload a photo for markets where a CV photo is the norm (GCC, MENA, most of Europe, Asia, and Latin America), it is processed entirely on your device. The image is resized in your browser and held only in your browser's session storage, which is cleared automatically when you close your browser tab. The photo is embedded directly into your PDF at download time. Your photo is never uploaded to our servers and is never sent to Anthropic or any AI service.
• Uploaded CV files (optional) — if you choose to pre-fill the form by uploading an existing CV (PDF or Word), the file is sent to our server, where its text is extracted in memory. Only the extracted text is sent to Anthropic's API to fill in the form fields. The file itself is never stored, and any images inside it — including photos — are never sent to Anthropic or any AI service. Scanned (image-only) CVs are declined rather than processed.
• Payment data — processed directly by Stripe. We never see or store your card details.
• Contact form submissions — your name, email, and message if you contact us.
• Order and receipt data — when you complete a purchase, we retain your name, email address, and purchase date for up to 30 days to send your receipt and a one-time follow-up email, after which this data is automatically deleted. As a delivery backup, an editable Word (.docx) copy of your resume — and cover letter, if you added one — is attached to your receipt email. The Word copy does not include your photo (your photo remains embedded only in the PDF you downloaded on your device). The Word files pass through our server in memory only for the email attachment and are never written to disk or stored.
• Security and rate-limiting data — we temporarily process IP addresses to protect the Service against automated abuse. This data is used only for rate limiting and is automatically deleted within one hour.
• Analytics and advertising data — page views, interactions, and session recordings collected by our analytics and advertising partners (see section 5) to help us understand how people use the site and to show relevant ads. This may include your IP address, browser type, pages visited, and time spent. On purchase, your hashed email address and name may be shared with advertising platforms (Meta/Facebook) solely for conversion attribution and audience matching — the raw data is never transmitted.

3. How we use your data

• To generate your AI resume using the Claude API (Anthropic). Your data is sent to Anthropic's API for processing and is subject to their privacy policy.
• To process your payment via Stripe.
• To respond to support requests.
• To measure and improve our advertising — analytics and advertising partners collect anonymised data to help us understand which marketing channels are working. On purchase, your hashed email and name may be used for conversion attribution and building lookalike audiences on Meta (Facebook/Instagram). The raw data is never transmitted; only a one-way cryptographic hash is shared.
• To improve the product — session recordings and heatmaps (Microsoft Clarity) help us identify where users get stuck so we can fix usability issues.

4. Data retention

Your form data is stored only in your browser's local storage and is automatically cleared after you download your resume. Any photo you uploaded is stored in your browser's session storage, which clears automatically when you close your browser tab — and is also cleared after you download your resume, whichever comes first. We do not retain personal data on our servers beyond what is required to fulfill your order: your name, email, and purchase date are kept for up to 30 days to deliver your receipt and a one-time follow-up email, and IP addresses used for rate limiting are deleted within one hour. If you upload a CV to pre-fill the form, the file is processed entirely in memory and is never stored. Anthropic retains API request data for up to 7 days per their data retention policy, after which it is deleted.

5. Third-party services

We use the following third-party services. Each may collect data as described in their own privacy policies.

• Stripe — payment processing. Your card details go directly to Stripe; we never see them. See stripe.com/privacy.
• Anthropic (Claude) — AI resume generation. Your form data is sent to Anthropic's API to generate your resume. See anthropic.com/privacy.
• Vercel — hosting and edge delivery. See vercel.com/legal/privacy-policy.
• Resend — transactional email delivery. Sends your receipt email (with the editable Word backup of your resume attached) and the one-time follow-up email. Resend receives your name, email address, and the Word attachment for delivery, and does not retain the email content beyond delivery. See resend.com/legal/privacy-policy.
• Google Analytics 4 — website analytics. Collects anonymised usage data (pages visited, session duration, country) to help us improve the product. Data is processed by Google. See policies.google.com/privacy.
• Microsoft Clarity — session recordings and heatmaps. Records anonymised user interactions (mouse movements, clicks, scroll depth) so we can identify usability issues. No personally identifiable information is captured. See Microsoft's privacy statement.
• Meta Pixel (Facebook) — advertising and retargeting. We use the Meta Pixel to measure ad performance and show Resumify ads to people who have visited our site. On purchase, your email address and name are hashed (SHA-256) in your browser before being sent to Meta — Meta receives only the hash, not the original data — and are used solely to match your purchase to an ad impression and to build lookalike audiences. You can opt out of Meta's data use at facebook.com/privacy/policy.
• LinkedIn Insight Tag — advertising analytics. Allows us to measure conversions from LinkedIn ad campaigns and build audience segments for LinkedIn ads. See linkedin.com/legal/privacy-policy.

6. Cookies and tracking technologies

We and our third-party partners use cookies and similar tracking technologies (pixels, local storage, session storage) to operate the site and measure performance. Specifically:

• Essential storage — browser local storage is used to preserve your resume form data during your session. This is required for the site to function.
• Analytics cookies — Google Analytics and Microsoft Clarity set cookies to distinguish users and sessions for analytics purposes.
• Advertising cookies — the Meta Pixel and LinkedIn Insight Tag set cookies to track visits and conversions for advertising attribution and retargeting.

You can control or disable cookies through your browser settings. Note that disabling cookies may affect site functionality.

7. Your rights

You may request deletion of any personal data we hold about you by emailing support@resumify.cloud. Because form data is only stored locally in your browser, you can also clear it at any time by clearing your browser data.

If you are located in the European Union, you have the following additional rights under the GDPR: the right to access the personal data we hold about you, the right to correct inaccurate data, and the right to delete your personal data. To exercise any of these rights, contact us at support@resumify.cloud.

8. Changes to this policy

We may update this policy from time to time. We will note the date of the latest revision at the top of this page.

9. Contact

Privacy questions? Email support@resumify.cloud.