Privacy Policy

1. Our core privacy commitments

• We do not request any sensitive data. We never ask for government identifiers, financial account or card details (beyond what Stripe needs to charge you directly), health data, biometric data, racial or ethnic origin, religious beliefs, political opinions, or trade-union membership.
• We do not sell your data in any way. Your personal data is never sold, rented, licensed or traded to any third party, for any purpose.
• We provide an ad-free service. ResmiAI shows no advertising and contains no advertising or retargeting trackers. You are the customer, not the product.
• We never train AI on your data. Your profile, CVs, cover letters, emails and job descriptions are never used to train AI models — ours or any provider’s.
• We protect every user equally. Our security controls and data policies are strict for all users, including the free plan. Protection is never withheld from users who have not paid.
• You can delete everything at any time. Account and data deletion is a single, self-service action available to every user.
• All data is stored in enterprise-grade security services. Encrypted, access-controlled and continuously monitored infrastructure.

2. Information we collect

• Account data (from social sign-in). When you sign in with Google or LinkedIn we receive only your basic profile — your name, email address and profile picture URL — and store it in our own account record for that provider. We do not request or receive sensitive data through social login, and we never access your contacts, private messages or files.
• Profile data. Information you voluntarily provide about your career — work experience, education, skills, projects and achievements — stored as your career profile.
• Job data. Job descriptions you paste and the documents we generate from them.
• Billing data. Your subscription plan and usage records, processed securely by Stripe. Card details are entered on Stripe’s infrastructure; we never see or store full card numbers.
• Usage data. Records of AI operations, token counts and credit usage, used for quotas, fairness and billing.
• Technical data. Limited device, browser and security information needed to keep the service running and to detect abuse.
• Measurement data (Google Analytics 4). Which pages you visit, how you arrived (referring site or campaign parameters), coarse device and region information, and which product milestones were reached — as categories, such as “a CV was generated”, never as content. When you are signed in we also record your account’s opaque internal ID so the same account is recognised across sessions and devices. Your CVs, cover letters, job descriptions, email address, name and tokens are never sent to the measurement service; see the Cookie Policy for the exact list and how to opt out.

We collect the minimum necessary to run the service. We do not collect special-category data, and we do not buy data about you from third parties.

3. How we use information

We use your data to operate the service: to generate the tailored documents you request, to manage usage quotas and subscriptions, to keep the service secure, and to comply with legal obligations. AI models process your profile and job descriptions solely to produce the documents you ask for.

Specifically, we do not:

• ❌Sell, rent or share your personal data with advertisers, data brokers or recruiters.
• ❌Use your data to train AI models.
• ❌Show you advertising or build advertising profiles of you.
• ❌Invent experience, qualifications or achievements in your documents.

4. AI processing and transparency

ResmiAI uses AI to transform the information you provide — never to invent it. Your content is sent to a secured AI provider API only to produce the output you requested, and is not used to train models. For a full description of what our AI does and does not do, see AI Transparency.

5. Third-party services

We use identity providers (Google, LinkedIn) for sign-in, an AI provider to generate content, Stripe for payment processing, Google Analytics for aggregate usage measurement, and enterprise cloud infrastructure for hosting and storage. Your data is transmitted to those providers only to the extent required to deliver the feature you use, under data-processing agreements. See Data Privacy & GDPR for the processor list and transfer safeguards.

6. Data retention and account deletion

We keep your account, profile and document data for as long as your account is active. You can delete your account and all associated data at any time from Settings, which permanently removes your personal data from our systems. Some billing records are retained only as long as tax and accounting law requires.

7. Your rights

Depending on your jurisdiction (including the GDPR and CCPA), you may have the right to access, correct, export, restrict, object to or delete your personal data. You can exercise most of these rights directly from your profile and settings, and we respond to requests within the timelines the law requires. See Data Privacy & GDPR for the full list.

8. Security

We use encryption in transit and at rest, strict ownership checks on every resource, least-privilege access and audited operations to protect your data. These protections apply to every user, including free accounts. See our Security page for details.

9. Cookies and browser storage

We use the browser storage that is strictly necessary to keep you signed in, plus optional Google Analytics 4 measurement that tells us which pages and features are used. We use no advertising, retargeting, profiling or cross-site tracking cookies, and we never send your CV, cover-letter or job-description content to the measurement service. The Cookie Policy lists every item, what is measured, what is excluded and how to refuse the optional measurement.

10. Acceptance

By using any ResmiAI service you accept this Privacy Policy and our Terms of Service. We ask you to confirm this explicitly — and in plain language — when you sign in.

11. Changes and contact

We may update this policy; material changes will be communicated through the service. Questions about this policy? Contact us at [email protected] or visit our Trust Center.