Privacy
Last updated
In short
Who handles your data
AI-Resume is run by Manish Singh, an individual based in India, who is the data fiduciary (or controller) for everything described here. There is no company, no staff and no third party with an account on our systems.
What we store
Only what the product needs to work. Specifically:
- Your account. Name, email address and profile picture, as given to us by Google or GitHub when you sign in. We never receive your password for those accounts.
- Your resumes. Every resume you create in the app, including each edit, so that undo, version history and “restore to earlier version” work.
- Your career profile. The facts you confirm — roles, dates, achievements, skills — and where each one came from, which is what lets us refuse to invent things.
- Jobs you target. The link or text of a posting, the parsed version of it, and the status you set.
- AI requests. What you asked the assistant and a record of each run: which model, how many tokens, how long it took, whether you accepted the result. The record holds those measurements, not a second copy of the generated text.
- Payments. If you buy a pass, we store the order reference, amount, status and expiry date. We never see or store your card details — those go to Dodo Payments, who take the payment as merchant of record.
- Technical records. Our host keeps request logs, which include IP addresses, and our rate limiter holds a short-lived counter against your account or IP for a few minutes to stop abuse. We do not build profiles from either.
We do not use advertising or analytics trackers, there are no third-party cookies, and the only cookie we set is the one that keeps you signed in. Fonts are served from our own domain, so loading a page does not tell a font provider you visited.
What stays on your device
The older resume editor keeps its drafts in your browser's local storage, not on our servers, until you sign in and save them. If you choose to supply your own AI provider key, that key is stored in your browser and sent straight to the provider you named; it never reaches us.
What the AI model receives
This is the part worth reading twice. When you ask for tailoring, a rewritten summary or any other writing help, we send the AI provider the text it needs to do that job: the relevant part of your resume, the job posting, and the profile facts that back the request up. It is sent over an encrypted connection, for that single request.
We do not train any model on your content, and we have no model of our own. What the provider may do with the text is governed by their own API terms, linked in the table below. If you would rather no AI provider saw a particular detail, leave it out of your profile — every deterministic feature, including the editor, the ATS score and PDF export, works without any AI call.
Who else can see it
We use the following services to run AI-Resume. Each one sees only what its job requires, and none of them is permitted to use your data for their own purposes.
| Service | What it does | Where |
|---|---|---|
| Vercel | Hosts the site and runs the server code. Sees request logs, including IP addresses. | United States |
| Neon | The Postgres database that stores your account, resumes, profile facts and jobs. | United States |
| Upstash | Short-lived Redis counters that enforce rate limits. Holds an account or IP identifier for minutes. | United States |
| Dodo Payments | Merchant of record for passes. Takes the payment and holds the card details; we never receive them. | Global |
| Anthropic | The AI model that writes and checks resume text. Receives the resume, job posting and profile facts for that request. | United States |
| Sign-in with Google, and an alternative AI model when configured. | United States | |
| GitHub | Sign-in with GitHub, when you choose it. | United States |
We will also disclose data where the law requires it. We do not sell personal data, and we do not share it for advertising.
Where your data is held
Our database, host and AI provider are in the United States, so using AI-Resume means your data is transferred and processed outside India. By creating an account you ask us to provide a service that works this way. If that is not acceptable to you, please do not upload your resume.
How long we keep it
- Your content — account, resumes, profile, jobs and AI history — until you delete it or ask us to. We do not expire accounts.
- Rate-limit counters expire by themselves within minutes.
- Payment records are kept for as long as tax and accounting rules require, even after an account is deleted, because a refund or a tax query needs them.
Your rights
You can, at any time:
- see what we hold about you, and get a copy;
- correct anything wrong — most of it you can edit directly in the app;
- delete your account and everything attached to it. Deletion removes your resumes, profile facts, jobs, AI history and sign-in records together, and it cannot be undone;
- withdraw consent, by deleting your account;
- complain to us, or to your data protection authority if we have not put it right.
Email hello@ai-resume.dev from your account address and we will answer within 3 business days and act within 30 days. That address is also the grievance contact for the purposes of India's Digital Personal Data Protection Act, 2023.
Security
Traffic is encrypted in transit, the database is encrypted at rest, and every query for your data is scoped to your account in the query itself rather than checked afterwards. No system is perfect: if we ever discover a breach affecting your data, we will tell you and the relevant authority. If you find a vulnerability, please report it to hello@ai-resume.dev before disclosing it publicly.
Children
AI-Resume is not intended for children. You must be at least 16 to create an account, and at least 18 to buy a pass.
Please leave out what you do not need
A resume does not need your religion, your caste, your health, your marital status, a government identity number or a photograph, and employers in most places should not be asking for them. We have no use for any of it. If you put such details into your profile they will be stored and sent to the AI provider like any other text, so the safest thing is not to add them.
Changes
If we change this policy we will update the date at the top, and for anything that materially affects you we will email the address on your account. Continuing to use AI-Resume after a change means you accept the updated policy.
Contact
hello@ai-resume.dev, or see the contact page.