Privacy Policy

1. Introduction

Resume Tailor ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume optimization platform.

This policy is compliant with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable international data protection standards.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and name when you register
• Resume Content: Professional information you enter including work experience, education, skills, and achievements
• Uploaded Documents: PDF resumes you upload for parsing and analysis
• Communication: Messages you send to our support team

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, and time spent on the platform
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs

2.3 Payment Information

Payment processing is handled by Razorpay. We do not store your credit card numbers, CVV, or banking details. Razorpay may share transaction IDs and payment status with us.

3. How We Use Your Information

We use your information for the following purposes:

• Provide Services: Create, store, and manage your resumes
• AI Processing: Analyze and optimize your resume using Claude AI by Anthropic
• Authentication: Verify your identity and manage your account
• Communication: Send magic link emails, notifications, and support responses
• Improvement: Analyze usage patterns to improve our services
• Legal Compliance: Comply with applicable laws and regulations

4. Third-Party Services

We share your data with the following third-party service providers:

5. Data Retention

• Account Data: Retained as long as your account is active
• Resume Content: Stored until you delete it or close your account
• Usage Logs: Retained for 12 months for analytics and security
• Payment Records: Retained for 7 years as required by tax laws

Upon account deletion, your personal data will be permanently removed within 30 days, except where retention is required by law.

6. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings (theme, language)
• Analytics Cookies: Help us understand how you use our service

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of our service.

7. Children's Privacy

Our service is intended for users 18 years of age and older. If you are under 18, you must have parental or guardian consent to use our service. We do not knowingly collect personal information from children under 18 without such consent.

If you believe a child has provided us with personal information without proper consent, please contact us immediately.

8. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data transmission
• Encrypted database storage
• Secure authentication using magic links (no passwords stored)
• Regular security audits and updates
• Access controls and monitoring

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Your Rights (DPDP Act)

Under India's DPDP Act 2023, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Correction: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Grievance Redressal: File complaints about data handling
• Right to Nominate: Nominate someone to exercise rights on your behalf

To exercise these rights, contact our Grievance Officer at the details below.

10. Data Breach Notification

In the event of a personal data breach that is likely to cause significant harm, we will notify affected users and the Data Protection Board of India within 72 hours of becoming aware of the breach, as required by the DPDP Act.

11. Contact Us

For privacy-related inquiries or to exercise your data rights:

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by posting a notice on our website. Your continued use of the service after such modifications constitutes acceptance of the updated policy.