This Privacy Policy explains what personal information Resume Bestie ("we," "our," "us") collects, why we collect it, how we use and share it, and the choices and rights you have. It applies to the Resume Bestie website and app (the "Service"). If you do not agree, please do not use the Service.
1. Information We Collect
Account information. Name (optional), email, password hash, OAuth identifiers (e.g., Google sub) if you sign in with a provider, and any avatar URL the provider returns.
Profile & resume content. Resumes you upload or create, job descriptions you paste in, cover letters, interview notes, and any other Content you submit.
Billing information. Stripe customer ID, subscription status, plan, period end, and last four digits / brand of your card. We never see or store your full card number — Stripe processes payments directly.
Usage data. Pages viewed, features used, AI prompts and responses associated with your Account, error logs, IP address, browser, device, approximate location (city/region), and timestamps.
Cookies & similar tech. See the Cookie Policy.
2. How We Use Your Information
- Provide, secure, and improve the Service (including AI tailoring, ATS scoring, exports).
- Process payments, manage subscriptions, and prevent fraud.
- Communicate with you about your Account, security alerts, and product changes.
- Respond to support requests.
- Comply with legal obligations and enforce our Terms.
- Generate aggregated, de-identified analytics to improve the Service.
We do not sell your personal information, and we do not use your Content to train third-party foundation models. See the AI Agreement.
3. Legal Bases (GDPR / UK GDPR)
If you're in the EEA, UK, or Switzerland, our legal bases are: (a) contract — to provide the Service you signed up for; (b) legitimate interests — to secure, improve, and market the Service in a privacy-respectful way; (c) consent — for optional analytics and marketing cookies; (d) legal obligation — for tax, accounting, and compliance.
4. Sharing & Sub-Processors
We share personal information only with vendors that help us run the Service, bound by data-protection contracts:
- Supabase — authentication, database, and file storage (US/EU).
- Stripe — payment processing (global).
- AI Gateway — LLM inference for AI features. Prompts and outputs are processed to deliver responses; the gateway does not use your Content to train third-party foundation models.
- Cloudflare — hosting, CDN, and DDoS protection.
- Email delivery providers — transactional emails (e.g., password resets, receipts).
We may disclose information when required by law, to protect our rights and users' safety, or in connection with a merger, acquisition, or sale of assets (with notice to you where legally required).
5. International Transfers
We are based in the United States. When we transfer personal data out of the EEA, UK, or Switzerland, we use Standard Contractual Clauses or another lawful transfer mechanism.
6. Data Retention
- Account & profile: kept while your Account is active and for up to 30 days after deletion.
- Resume Content & AI history: kept while your Account is active; deleted within 30 days of Account deletion (or sooner if you delete specific items).
- Billing records: kept for at least 7 years to meet tax and accounting obligations.
- Server logs: typically 30–90 days.
7. Your Rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to processing or withdraw consent. To exercise any of these rights, email support@resumebestie.com. You can also delete most of your data directly from your Account settings. We will respond within the time required by applicable law (typically 30 days). You have the right to lodge a complaint with your local data-protection authority.
8. Security
We use encryption in transit (TLS) and at rest, role-based access controls, audited service-role keys, and Row-Level Security on the database. No method of transmission or storage is 100% secure, but we work hard to protect your data and notify you of material incidents as required by law.
9. Family Profiles & Information About Family Members
Account holders must be at least 18 years old. The Service is not directed to and may not be used by anyone under 18. The Family Plan allows an adult account holder to create additional profiles for family members inside their single account. These profiles do not have their own login or billing — the adult account holder controls all data, switches between profiles from the dashboard, and may delete any profile (and its resumes) at any time.
The adult is the only operator. When an adult account holder builds a resume for a family member in Student Mode, the adult — not the family member — completes every step. We do not knowingly collect personal information directly from anyone under 18. Information about a family member is provided to us by the adult account holder, who acts as the source and controller of that information; we process it as a service provider/processor solely to generate the resume. The adult account holder is responsible for the accuracy and lawfulness of any information they enter about another person and represents that they are the parent or legal guardian and have the right to provide it.
In Student Mode we collect only what is needed to produce the resume — for example, name, email, city/state (optional), school name, grade, graduation year, GPA (optional), clubs, sports, volunteer activities, life-experience descriptions, and skills. We do not ask for date of birth, Social Security number, home street address, or any sensitive category of personal information. We do not run targeted advertising, we do not sell or "share" personal information for cross-context behavioral advertising, and we do not allow Student Mode content to be used to train third-party foundation models (see the AI Agreement).
Adult account holders may review, correct, export, or delete any family profile's information at any time from their account settings, or by emailing support@resumebestie.com. All account communications go to the adult account holder's email on file; we never email family profiles directly. Plain-language details live in the Family & Student Guide.
10. California Privacy (CCPA/CPRA)
California residents have the right to know what personal information we collect, request deletion, request correction, opt out of "sale" or "sharing" (we do neither), and not be discriminated against for exercising these rights. To make a request, email support@resumebestie.com with the subject line "California Privacy Request."
11. Changes
We will update this Policy from time to time and post the new "Last updated" date. Material changes will be notified by email or in-app notice.
12. Contact
Privacy questions or requests: support@resumebestie.com