Privacy policy

What we collect

We collect the minimum needed to run the product:

• Account details: your name, email address and a hashed password. Passwords are stored with bcrypt and are never recoverable in plain text.
• Resume content: everything you type into the builder, including any photo you upload, plus the theme settings for each resume.
• Usage records: which plan you are on, when a subscription started, how many resumes and downloads you have created. This is what the plan limits are checked against.
• Technical data: your IP address and browser user agent, recorded in standard server logs and used only to keep the service running and to block abuse.

Why we need it

Account details let you sign in and keep your work across devices. Resume content is stored so you can come back, edit and export it. Usage records are how the free, Pro and Premium limits are enforced. Server logs are how we diagnose faults and stop automated abuse.

We do not profile you, we do not build advertising audiences, and we do not sell or rent personal data to anyone.

Cookies and local storage

We set one cookie, the session cookie, which keeps you signed in. It is HttpOnly and SameSite=Lax. We also use your browser's local storage to remember whether you chose light or dark mode. That is all.

Our own advertising slots do not set cookies. The pages do load fonts from Google Fonts and two JavaScript libraries from unpkg, which necessarily see the IP address of the browser requesting them, as any external asset would.

How long we keep it

Resume content and account details stay for as long as your account exists. Deleting your account removes the resumes, subscriptions and uploaded files associated with it immediately and permanently.

Password reset tokens expire after one hour. Server logs are rotated, not archived indefinitely. Deleted resumes are removed from the database rather than flagged, so they cannot be recovered afterwards — including by us.

Who else sees your data

If you turn on a public share link for a resume, anyone with that link can read the resume. That is the only way your content becomes visible to a third party, and you control it per resume.

Beyond that, access is limited to the operators of this service for support and maintenance. We do not share data with advertisers, data brokers or recruiters.

Your rights

At any time, and without needing to justify it, you can:

• Download your resume as a PDF, using the standard export.
• Correct any stored detail from the settings and builder pages.
• Delete your account and everything in it from the settings page.
• Ask us a question about your data and get an answer within one business day.

Children

This service is not directed at children under 16, and we do not knowingly hold their data. If you believe a child has created an account, email us and we will remove it.