Privacy Policy

This Privacy Policy explains how ResumeGenie (operated as a sole proprietorship based in India) collects, uses, shares, and protects your personal data when you use resumegenie.io and the ResumeGenie browser extension. By using the Service you agree to this Policy.

1. Data we collect

• Account data. When you sign up, our authentication provider (Clerk) handles your login and shares with us your user ID, name, and email address.
• Career & profile data (your “memory bank”). The information you enter or import — work experience, projects, skills, education, summary, contact details, custom sections, and career-journal entries — and any résumé files (PDF/DOCX) you upload, which we parse into structured data.
• Job & application data. Job descriptions you paste or clip, tailoring history, application-tracker entries, and saved application answers you choose to store for reuse.
• Billing data. Your plan, credit balance and ledger, and payment confirmations. Payments are processed by Razorpay; we do not receive or store your full card or bank details.
• Usage data. For each AI action we log metadata — the feature used, the model, token counts, cost, and timestamp — to operate, meter, and protect the Service. We do not store the prompt or résumé content in these usage logs.
• Extension data. When you actively use the extension, it reads content from the current page (e.g. a job description) and may capture a screenshot of the active tab to help complete a form. This happens only when you trigger it, and the data is sent to our API to perform the action you requested.

2. How we use your data

• to provide the Service — generating tailored résumés and related materials from your memory bank and a target job;
• to process payments, manage credits, and prevent abuse (rate limiting and fraud prevention);
• to maintain, secure, debug, and improve the Service;
• to send you transactional emails (e.g. account or billing notices) via our email provider;
• to comply with legal obligations.

3. AI processing

To generate output, we send the relevant parts of your Content (such as your memory-bank data and the job description) to our AI provider, OpenRouter, which routes the request to an underlying model provider (for example, Anthropic). These providers process the data to return a result and act as our processors for that purpose. We choose providers that do not use this data to train their models in the standard API configuration. AI output may be inaccurate — you should review it before use.

4. Who we share data with (subprocessors)

We do not sell your personal data. We share it only with service providers who help us run the Service:

• Clerk — authentication and account management.
• Neon — managed PostgreSQL database hosting (where your data is stored).
• OpenRouter and its model providers (e.g. Anthropic) — AI generation.
• Razorpay — payment processing.
• Resend — transactional email delivery.
• Apify — only if you use the optional LinkedIn audit by providing your public profile URL.
• Vercel — application hosting and delivery.

We may also disclose data if required by law, or to protect our rights, users, or the public.

5. Data retention

We keep your data for as long as your account is active or as needed to provide the Service. You can edit or delete memory-bank items, tailoring runs, applications, and saved answers at any time. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, accounting, or fraud-prevention purposes.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in the app, or contact us at support@resumegenie.io and we will respond as required by applicable law.

7. Cookies

We use strictly necessary cookies for authentication and session management (set by Clerk). We do not use advertising cookies. You can control cookies through your browser, but disabling necessary cookies may prevent you from signing in.

8. Security

We use industry-standard measures to protect your data, including encrypted connections, access controls, and reputable infrastructure providers. Your extension access token is a secret bearer credential — keep it private; you can regenerate or revoke it in settings at any time. No system is perfectly secure, so we cannot guarantee absolute security.

9. International transfers

Our providers may process data in countries other than yours. Where data is transferred internationally, we rely on the safeguards offered by these providers and applicable legal mechanisms.

10. Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

11. Changes to this Policy

We may update this Policy from time to time. We will update the “Last updated” date above and, for material changes, take additional steps to notify you where appropriate.

12. Contact

For privacy questions or requests, contact us at support@resumegenie.io.