Privacy Policy

Last updated: May 24, 2026

The short version

Your resume stays in your browser. It never touches our servers. Sign-in is optional and only stores your email, plan tier, and preferences. Analytics are cookieless. AI calls (if you use them) go directly from your browser to Groq with your own key. We send account emails (welcome, verification, password reset, security alerts); product updates and reminders are opt-out with one-click unsubscribe. Below is the long version.

Resume Data

Your resume content (personal info, experience, education, skills, etc.) is stored in your browser's localStorage on your own device. It never leaves your browser unless you explicitly use the AI feature (see Third-Party Services below) or sign in (see Account Data). You can clear this data anytime through your browser settings or by clicking Reset in the builder.

Account Data (Optional)

Sign-in is optional. If you create an account (Google or email/password), we store: your email address, full name (if provided via Google), avatar URL (if you upload one or it's provided via Google), your plan tier, and the account preferences you choose (notification settings, builder defaults, and any optional job-search profile fields you fill in). We do NOT store your resume content on our servers. Your resume always lives in your browser.

Analytics

We use Vercel Web Analytics, a privacy-friendly analytics service that does NOT use cookies and does NOT track individual users across sites. It records aggregate page views, top referrers, country, and device type. It does not collect personal information, IP addresses, or session recordings. This helps us understand which features are popular without compromising your privacy.

Cookies

ResumeBuildz uses minimal cookies. Authentication cookies are set when you sign in so we can recognize your session. We do NOT use tracking cookies, advertising cookies, or third-party marketing cookies. The only first-party cookies are session cookies for auth.

Third-Party Services

ResumeBuildz offers an optional AI-powered feature that uses the Groq API. This feature requires your own free API key from console.groq.com. When you use this feature, your resume data is sent directly from your browser to Groq's servers. It never passes through our servers. We do not have access to your API key or the data you send to Groq. We also use Resend to deliver account emails (your email address is shared with Resend only to send them) and, if enabled, Cloudflare R2 to store avatar uploads. Please review each provider's privacy policy for how they handle data.

Email & Communications

If you create an account, we send transactional emails essential to the service: a welcome message, email verification, password resets, security alerts (e.g. when your password changes), email-change confirmations, and an account-deletion confirmation. These are tied to your account and are not promotional. We may also send product updates and occasional getting-started reminders; you control these in Account → Notifications and every such email includes a one-click unsubscribe link (we honor List-Unsubscribe). If you join the Pro launch waitlist, your email is stored so we can notify you when Pro launches. If you use the contact form, the message and your email are stored and forwarded to us so we can reply. Email delivery is handled by Resend. You can request removal of your email at any time by contacting us.

Data Security

Your resume content lives in your browser and is never transmitted to our servers. Account data (email, name) is stored in a Neon PostgreSQL database with encryption at rest and in transit. We follow security best practices including HSTS, CSP headers, and OAuth redirect whitelisting.

GDPR & Your Rights

You have the right to export your data (Profile dropdown → Export My Data) and the right to delete your account (Profile dropdown → Delete Account). Account deletion permanently removes your profile from our database and clears your local resume data. EU users can exercise these rights at any time without contacting support.

Children's Privacy

ResumeBuildz is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated revision date. We encourage you to review this page periodically. Significant changes will be announced via the changelog page.

Contact

If you have any questions about this privacy policy or ResumeBuildz's data practices, please contact us at Suryaraj8147@gmail.com.