Privacy Policy

This Privacy Policy explains how ResumeGenie (operated as a sole proprietorship based in India) collects, uses, shares, and protects your personal data when you use resumegenie.io and the ResumeGenie browser extension. By using the Service you agree to this Policy.

1. Data we collect

• Account data. When you sign up, our authentication provider (Clerk) handles your login and shares with us your user ID, name, and email address.
• Career & profile data (your “memory bank”). The information you enter or import — work experience, projects, skills, education, summary, contact details, custom sections, and career-journal entries — and any résumé files (PDF/DOCX) you upload, which we parse into structured data.
• Job & application data. Job descriptions you paste or clip, tailoring history, application-tracker entries, and saved application answers you choose to store for reuse.
• Billing data. Your plan, credit balance and ledger, and payment confirmations. Payments are processed by Razorpay; we do not receive or store your full card or bank details.
• Usage data. For each AI action we log metadata — the feature used, the model, token counts, cost, and timestamp — to operate, meter, and protect the Service. We do not store the prompt or résumé content in these usage logs.
• Extension data. When you actively use the browser extension, it reads content from the current page and may capture a screenshot of the active tab to complete a form. See section 9 for full details.

2. How we use your data

• to provide the Service — generating tailored résumés and related materials from your memory bank and a target job;
• to process payments, manage credits, and prevent abuse (rate limiting and fraud prevention);
• to maintain, secure, debug, and improve the Service;
• to send you transactional emails (e.g. account or billing notices) via our email provider;
• to comply with legal obligations.

3. AI processing

To generate output, we send the relevant parts of your Content (such as your memory-bank data and the job description) to our AI provider, OpenRouter, which routes the request to an underlying model provider (for example, Anthropic). These providers process the data to return a result and act as our processors for that purpose. We choose providers that do not use this data to train their models in the standard API configuration. AI output may be inaccurate — you should review it before use.

4. Who we share data with (subprocessors)

We do not sell your personal data. We share it only with service providers who help us run the Service:

• Clerk — authentication and account management.
• Neon — managed PostgreSQL database hosting (where your data is stored).
• OpenRouter and its model providers (e.g. Anthropic) — AI generation.
• Razorpay — payment processing.
• Resend — transactional email delivery.
• Apify — only if you use the optional LinkedIn audit by providing your public profile URL.
• Vercel — application hosting and delivery.

We may also disclose data if required by law, or to protect our rights, users, or the public.

5. Data retention

We keep your data for as long as your account is active or as needed to provide the Service. You can edit or delete memory-bank items, tailoring runs, applications, and saved answers at any time. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, accounting, or fraud-prevention purposes.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in the app, or contact us at support@resumegenie.io and we will respond as required by applicable law.

7. Cookies

We use strictly necessary cookies for authentication and session management (set by Clerk). We do not use advertising cookies. You can control cookies through your browser, but disabling necessary cookies may prevent you from signing in.

8. Security

We use industry-standard measures to protect your data, including encrypted connections, access controls, and reputable infrastructure providers. Your extension access token is a secret bearer credential — keep it private; you can regenerate or revoke it in settings at any time. No system is perfectly secure, so we cannot guarantee absolute security.

9. Browser extension

The ResumeGenie browser extension (“Clip & Tailor” and “Apply with Vellum”) helps you tailor a résumé to a job and assist with online applications. It is designed to act only when you trigger it — there is no background tracking and it does not record your browsing history. The categories of data it handles are:

• Website content.When you clip a job, it reads the job-description text and page structure of the active tab, and may capture a screenshot of that tab. When you run auto-apply, it reads the application form’s fields so it can fill them. We send this to our API only to perform the action you asked for; we do not crawl other tabs or pages.
• Personally identifiable information. To complete applications, the extension uses your memory-bank data (such as your name, email, and contact details) and writes it into form fields on the application site. Forms may also ask for details such as expected compensation or notice period; if you choose to save an answer for reuse, that value is stored in your account, and you can view and delete saved answers in Settings.
• Authentication information. The extension stores a personal access token that you generate in Settings and sends it with each request to authenticate you. Keep it private; you can revoke or regenerate it at any time. The extension does not capture passwords for third-party sites — if a login or CAPTCHA wall appears, it pauses and asks you to act.

We do not sell or transfer this data to third parties, and we use it only to provide the extension’s features (the same processing and subprocessors described in sections 3 and 4). You can stop this collection at any time by not triggering the extension, revoking its token, or uninstalling it.

10. International transfers

Our providers may process data in countries other than yours. Where data is transferred internationally, we rely on the safeguards offered by these providers and applicable legal mechanisms.

11. Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

12. Changes to this Policy

We may update this Policy from time to time. We will update the “Last updated” date above and, for material changes, take additional steps to notify you where appropriate.

13. Contact

For privacy questions or requests, contact us at support@resumegenie.io.