Resumerry Privacy Policy

1. Information We Collect

When you create an account, design resumes, or use the Resumerry platform, we collect only the information necessary to provide and improve our service:

• Account Identifiers: Your full name, email address, and an encrypted hash of your account password (hashed using bcrypt with industry-standard salt factors).
• Resume Content & Documents: Information you explicitly enter into our vector canvas, including employment history, educational credentials, certifications, skill ratings, contact details, summaries, and custom sections.
• User-Uploaded Media: Headshot photographs and imported PDF files you choose to upload to populate your resume avatar or parse existing resume data.
• Usage & Device Metrics: Anonymized technical data such as browser type, operating system, IP address, referral URLs, and session timestamps used solely for system stability, fraud prevention, and performance monitoring.

2. How We Use Your Information

We process your personal information strictly under legal bases established by global privacy laws:

• To render your drag-and-drop vector resumes on the canvas and compile razor-sharp vector PDF downloads via pdf-lib.
• To provide authenticated access to your saved resumes and user settings across devices.
• To process subscription payments ($1 Weekly Pass and $3 Monthly Pro) through accredited, PCI-DSS Level 1 compliant payment gateways.
• To send critical transactional notifications, such as password reset tokens and billing receipts.
• To protect our infrastructure and legitimate users from automated abuse, DDoS attacks, and unauthorized system penetration.

3. Resume Data & AI Processing Policy

Resumerry features AI-assisted tools for resume formatting, smart bullet rewriting, and legacy document parsing. We maintain strict safeguards regarding AI processing:

• Zero Training on Personal Content: We do not use your resume documents, personal experience, or contact data to train, fine-tune, or improve public foundational AI models.
• Transient Inference Only: When you invoke AI features, your text is submitted via enterprise, zero-data-retention APIs solely for the real-time completion request and is immediately discarded.
• Local Ingestion: PDF document parsing is executed using secure in-memory server buffers (pdf-parse) to extract structural career fields without permanent file archiving.

4. Storage, Security & Encryption

We maintain comprehensive technical and organizational measures to safeguard your sensitive career history:

• In-Transit Encryption: 100% of data traveling between your browser and Resumerry servers is protected using TLS 1.3 cryptographic transport with HTTP Strict Transport Security (HSTS) and automatic Let's Encrypt certificates managed by Caddy.
• At-Rest Security: Relational resume data and account records are housed in isolated PostgreSQL 16 databases operating inside dedicated private Docker networks (resumerry_internal) inaccessible from the public internet.
• No Plaintext Passwords: Passwords are never logged or stored in plaintext; all user credentials undergo one-way salted bcrypt hashing prior to database persistence.

5. Sharing & Public Links Control

By default, every resume you craft on Resumerry is strictly private (isPublic: false). Nobody can view, download, or access your resume without direct authentication into your account.

If you choose to use our Live Shareable Link feature (https://resumerry.com/r/:id), a unique cryptographic identifier is generated. You retain complete control to toggle public sharing off at any second from the Studio toolbar, instantly invalidating the link and making the document private once more.

6. Payments & Subscription Billing

Resumerry offers simple, transparent subscription plans: the Weekly Pass ($1/week) and Monthly Pro ($3/month).

We do not collect or store full credit card numbers, CVVs, or bank account numbers on Resumerry servers. All financial transactions are processed directly by certified third-party payment processors compliant with Payment Card Industry Data Security Standards (PCI-DSS). You may cancel your subscription at any time with one click from your account dashboard.

7. Your GDPR & CCPA Rights

Regardless of your geographic location, Resumerry extends universal privacy protections:

• Right to Access: You can review all personal data and resumes associated with your profile at any time directly through your dashboard.
• Right to Rectification: You may edit, update, or correct your personal and professional information inside the editor.
• Right to Data Portability: You can export your resumes at any time as vector PDFs or standard JSON document definitions.
• Right to Erasure (To Be Forgotten): You have the unconditional right to request the total, permanent purge of your account and all associated documents from our servers.
• Right to Opt-Out: We do not sell personal data, participate in cross-contextual behavioral advertising, or broker employment profiles.

8. Retention & Account Deletion

We store your resume documents for as long as your account remains active. If you delete a resume from your dashboard, all corresponding canvas nodes, layout overrides, and uploaded avatar images are purged permanently from our database and storage volumes.

If you request an account deletion, our automated retention sweep purges your user profile, resumes, and session records within 24 hours. Backups containing encrypted fragments age out in accordance with standard 30-day backup cycle policies.

9. Contact & Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your legal data rights, or need assistance regarding your career documents, please contact our Data Protection Officer: