1. Who we are
Build My Resume(“we”, “us”, “our”) is the controller of the personal data described in this policy. For any privacy question or request, contact us at support@build-myresume.com.
2. Information we collect
We collect the following categories of information:
- Account information. Your email address (used for sign-in via one-time code), and, if you provide it, your name.
- Resume content. The information you enter or upload to build, score, or optimize a resume — such as your work history, education, skills, and contact details. This may include sensitive personal information you choose to include.
- Usage data. Records of your activity in the Service, such as optimizations and ATS audits you run and resumes you save.
- Payment information. If you subscribe, our payment provider processes your payment. We do not receive or store your full card details — we keep only subscription metadata such as plan, status, billing period, and a customer reference.
- Technical and analytics data. Basic, aggregated information about how the Service is used (such as page views, approximate device type, traffic source, and performance metrics), plus strictly necessary sign-in/session cookies.
3. How we use your information
We use personal data to:
- provide, operate, and maintain the Service and your account;
- generate the resume features you request (building, scoring, optimizing, tailoring);
- process payments and manage your subscription;
- send you service and transactional emails (e.g., sign-in codes, billing notices);
- secure the Service, prevent abuse, and enforce our Terms;
- understand aggregate usage to improve the Service;
- comply with legal obligations.
Where the GDPR or similar laws apply, our legal bases are: performance of our contract with you (to provide the Service); our legitimate interests (to secure, maintain, and improve the Service); your consent (where we ask for it); and compliance with legal obligations. You can withdraw consent at any time where processing is based on consent.
4. How your resume is processed by AI
To generate rewritten text and suggestions, the resume content you submit is sent to our AI routing provider, OpenRouter, which forwards the request to a third-party large-language-model provider that performs the processing on our behalf. On every request we instruct OpenRouter to route only to providers that do not retain or train on your content (a “no data collection” instruction), and we configure our account to the same effect. We do not use your resume content to train our own models, and we do not sell it. AI processing is limited to delivering the features you ask for.
When you upload a file, we read it into memory to extract its text and structure, then discard the original — we do not store the PDF or DOCX you uploaded. Your ATS and recruiter scores are calculated by our own deterministic rule engine, not generated by the AI model. These scores are automated estimates to help you improve your resume; they do not produce legal or similarly significant effects, and you remain in control of every change before it is applied.
5. How we share information
We do not sell your personal information, and we do not “share” it for cross-context behavioural advertising. We share data only with the service providers (“sub-processors”) that help us run the Service, under agreements that limit their use of it to providing services to us:
- Supabase — database hosting and account authentication, to store your account and resume data securely.
- OpenRouter (and the model provider it routes to) — to process resume content and generate the AI features you request, under the no-retention, no-training instruction described in Section 4.
- Dodo Payments — to take payments and manage your subscription.
- Resend — to send sign-in codes and service emails.
- Vercel — to host and serve the website and to measure performance and aggregate usage.
We may also disclose information if required by law, to protect our rights or users, or in connection with a business transfer. If our sub-processors change, we will update this policy.
6. International transfers
We and our providers may process your data in countries other than yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect your data when it is transferred internationally.
7. How long we keep your data
- Uploaded files. The original PDF or DOCX you upload is processed in memory and discarded after the run — we do not store it.
- Saved resumes and scores. The optimized resume and its score summary are saved to your dashboard. We keep the full saved resume for a limited number of your most recent runs based on your plan (more on Pro than on Free); older entries are trimmed automatically, though basic history details such as scores and dates may remain.
- Account information. Kept for as long as your account is active.
- Billing records. Retained as long as needed to meet tax, accounting, and legal obligations, even after you cancel.
You can ask us to delete your account and associated data at any time (see your rights below). We will action verified deletion requests within 30 days, except for limited information we are required to keep by law.
8. Your rights and choices
Depending on where you live, you may have some or all of the following rights over your personal data:
- access a copy of your data and information about how it is processed;
- correct inaccurate or incomplete data;
- delete your data (“right to be forgotten”);
- port your data to another service;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent.
To exercise any right, email support@build-myresume.com from the address tied to your account. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.
If you are in the EU, UK, or EEA (GDPR)
You have the rights listed above and the right to lodge a complaint with your local data protection authority.
If you are in India (DPDP Act, 2023)
You have the right to access, correct, and erase your data, to withdraw consent, to nominate another person to exercise your rights, and to a grievance-redressal process. Contact us at support@build-myresume.com for any grievance, and we will address it promptly.
If you are in California (CCPA/CPRA)
You have the right to know what personal information we collect and how we use it, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell or share your personal information. We will not discriminate against you for exercising these rights.
9. Cookies and tracking
We use only strictly necessary cookies to keep you signed in and to operate the Service. Our analytics are privacy-friendly and aggregate — they do not use advertising cookies and do not track you across other websites — so we do not show a cookie-consent banner. We do not use your data for advertising. If we introduce any non-essential cookies or tracking in the future (for example, to run a referral programme), we will ask for your consent first where required by law.
10. Security
We use reasonable technical and organizational measures to protect personal data, including access controls and encryption in transit. No method of transmission or storage is completely secure, but we work to protect your information and to address incidents promptly.
11. Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, provide additional notice where appropriate.
13. Contact us
For any privacy question, request, or complaint, email support@build-myresume.com.