Privacy Policy

Learn how Resuvo collects, uses, and protects your information when using our platform.

Introduction

Resuvo ("Resuvo," "we," "us," or "our") operates a web-based resume builder platform accessible at resuvo.com (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect information about you when you create an account, build and manage resumes, use AI-powered features, subscribe to a paid plan, or otherwise interact with the Service. It applies to all users, including visitors, registered account holders, and paid subscribers.

We built Resuvo on the belief that your professional story belongs to you — not us. Our role is to give you the best tools to tell that story. This policy exists to be fully transparent about what data we collect, why we collect it, and how we keep it secure. We have written it in plain language so you can actually read and understand it.

By creating an account or otherwise using the Service, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service. Questions may be directed to [email protected] at any time.


Information We Collect

We collect information in three ways: directly from you when you use the Service, automatically through your activity on the platform, and occasionally from third-party services you choose to connect to your account.

Account Information

When you register, we collect your full name, email address, and a hashed password. If you sign in via Google or another OAuth provider, we receive the profile details authorised by that provider — typically your name, email, and profile photo. We never store passwords in plaintext.

Resume and Professional Content

The core purpose of Resuvo is to help you build and manage resumes. We store all content you enter on the platform: employment history, job titles, responsibilities and achievements, education details, academic institutions, degrees and dates, skills, certifications, awards, projects, and portfolio or professional links. This content is yours — we store it solely to provide the Service.

Uploaded Files

You may upload existing resumes, reference documents, or other files. We store these securely to power import, parsing, and storage functionality. You can delete uploaded files at any time from your account settings.

Payment Information

Payment processing is handled entirely by Stripe, our PCI DSS-compliant third-party processor. We do not receive or store your full card number, CVV, or banking details. We retain your subscription status, plan history, and billing email for account management and legal recordkeeping.

Device, Browser, and Usage Data

When you access the Service, we automatically collect technical information including your IP address, browser type and version, operating system, screen resolution, and referring URLs. We also collect session-level data such as pages visited, features used, click interactions, and session duration. This information helps us maintain performance, diagnose issues, and improve the product.


How We Use Information

We use the information we collect to operate, maintain, and improve Resuvo, and to provide you with the best possible resume-building experience. We use your information for account creation and management, including verifying your identity and communicating account-related updates. Your professional content powers all resume creation, editing, versioning, export, and sharing features on the platform.

We use your usage patterns, saved preferences, and resume history to personalise your experience and surface relevant suggestions. When you use AI tools within the platform, your inputs are processed to generate content — see Section 5 for full details. We use device data and behavioural signals to detect suspicious activity and protect account integrity. Aggregated, anonymised usage data helps us understand how the platform is used and make better product decisions.

We send transactional emails — account confirmations, password resets, billing receipts, and service announcements. We do not send marketing emails without your opt-in consent, and you can unsubscribe from non-essential communications at any time. Subscription and billing data is used to manage your plan and maintain records required by law. We do not use your personal information for advertising or sell it to data brokers, marketing platforms, or any third party for their own commercial purposes.


Ownership of Resume Content

Your content is yours. All resumes, cover letters, professional summaries, employment histories, and other materials you create or upload through Resuvo remain your sole property. Resuvo claims no ownership, intellectual property rights, or licence over the personal or professional content you produce using the Service beyond what is strictly necessary to operate the platform and deliver features to you.

We process your resume content only to provide the Service — to render, store, edit, export, and optionally analyse your documents on your behalf. We do not use your resume content for any commercial purpose, share it with employers or recruiters without your explicit action, or disclose it to third parties except as described in Section 7.

You may export, download, or permanently delete your content at any time. When you delete your account, your resume content is removed from our active systems within 30 days, subject to the retention exceptions described in Section 9.


AI Features and Data Processing

Resuvo offers AI-powered tools to help you write stronger, more effective resumes. These features include automated content suggestions, professional summary generation, bullet point rewrites, keyword gap analysis, cover letter drafting, and resume quality scoring. When you use these tools, the inputs you provide — such as a target job description, your work history, or a draft section — are transmitted to our AI systems to generate a relevant response.

AI processing within Resuvo is conducted through contracted third-party model providers engaged under strict data processing agreements. These providers are prohibited from using your submitted content to train their own models, sharing it with other customers, or retaining it beyond the duration required to generate your output.

Resuvo does not sell your personal information or resume content for AI training purposes. We do not use your data to train Resuvo's own AI models without your explicit, separately obtained opt-in consent. If we introduce such a programme in the future, participation will be entirely voluntary and clearly communicated.

AI-generated content is a starting point, not a finished product. We recommend that you carefully review all AI-generated suggestions for accuracy and appropriateness before including them in a resume or job application. You are responsible for the content you choose to use.


Cookies and Tracking Technologies

Resuvo uses cookies and similar technologies — including browser local storage and analytics pixels — to operate the Service and understand how it is used. We use four categories of cookies:

  • Authentication cookies — essential for keeping you signed in across page loads and sessions. Without these, the Service cannot function.
  • Functional cookies — remember your preferences, settings, and in-progress work so you do not lose context when navigating the platform.
  • Analytics cookies — collect aggregated data about how users interact with the platform, including which features are used most and where users encounter friction. This data is anonymised and used for product improvement only.
  • Performance monitoring technologies — help us detect errors, measure page load times, and maintain platform reliability.

You can configure your browser to refuse or delete cookies at any time. Disabling authentication or functional cookies will impair or prevent your ability to use the Service. Disabling analytics cookies will have no effect on core functionality. We do not use cookies for cross-site advertising or behavioural targeting.


How We Share Information

We do not sell your personal information or resume content to any third party, ever. We share information only in the following limited circumstances:

Service Providers

We work with a small number of carefully selected vendors to operate the platform. These include cloud infrastructure providers for secure hosting and storage, payment processors for subscription billing, transactional email providers, analytics providers for aggregated usage reporting, and AI model providers for powering AI features. Each provider is engaged under a data processing agreement and may use your information only for the specific purpose for which it was disclosed.

Legal Compliance

We may disclose information when required to do so by applicable law, court order, regulatory requirement, or in response to a valid legal process. Where legally permissible, we will notify you before complying with such a request.

Protection of Rights

We may share information when we believe in good faith that disclosure is necessary to prevent fraud, protect the security of the platform, or protect the rights, property, or safety of Resuvo, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent in-platform notice before your information is transferred and becomes subject to a different privacy policy.


Data Security

Resuvo implements technical and organisational safeguards appropriate to the nature of the data we process. All data transmitted between your browser and our servers is encrypted using HTTPS and TLS 1.2 or higher. Sensitive data at rest — including account credentials and resume content — is encrypted using AES-256. Access to production systems and user data is restricted to a small number of authorised personnel governed by role-based access controls and audit logging.

We conduct regular security reviews of our infrastructure and engage third-party security assessors periodically for penetration testing. We also implement automatic session expiration, secure credential hashing, and anomaly detection to protect accounts from unauthorised access. In the event of a security incident that affects your personal information, we will notify you in accordance with applicable law.

While we invest seriously in security, no system is impenetrable. We cannot guarantee absolute security of information transmitted over the internet, and we encourage you to use a strong, unique password and enable two-factor authentication where available.


Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service. Account and resume data is retained for the lifetime of your account, plus up to 30 days following deletion to allow for unintended deletion recovery. Encrypted backup copies may persist for up to 90 days before being permanently purged as part of our regular backup rotation.

Billing and transaction records are retained for seven years in compliance with financial reporting and tax obligations, regardless of account status. Support communications are retained for three years so our team can reference prior interactions when handling recurring issues. Usage and analytics data is retained in anonymised, aggregated form and does not personally identify you — this data may be retained indefinitely for product analysis.

When retention periods expire, data is securely deleted or irreversibly anonymised. Where retention is required by applicable law, regulation, or legal process, we will retain the relevant data for the legally required period even following a deletion request.


Your Rights and Controls

Resuvo supports the following rights for all users, regardless of jurisdiction, to the extent technically and legally practicable. You may access a copy of the personal information we hold about you, correct inaccurate or incomplete information at any time through your account settings, download your resumes and account data in a portable format, delete individual resumes or your entire account and all associated content, request data portability in a machine-readable format, and opt out of non-essential communications at any time via the unsubscribe link in any email or through your notification preferences.

To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days. We may ask you to verify your identity before processing a request to protect against unauthorised access.


Account Deletion

You may delete your Resuvo account at any time from your account settings page. Upon submitting a deletion request, your account credentials, profile information, resume content, uploaded files, and saved preferences are queued for permanent deletion from our active production systems. This process completes within 30 days of your request, during which your account is deactivated and your content is no longer accessible.

Encrypted backup copies of your data may persist for up to 90 days in offline backup storage before being permanently purged as part of our scheduled rotation. These backups are not accessible to our team or systems during normal operations.

Certain information may be retained beyond the 30-day window where required by law — including billing records subject to financial retention obligations and information relevant to an unresolved legal dispute. We retain only the minimum information necessary. If you change your mind after submitting a deletion request, contact [email protected] within the 30-day window to cancel before permanent deletion takes effect.


International Data Transfers

Resuvo is operated from infrastructure hosted across multiple regions, and some of our third-party service providers process data in countries other than your own. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with restrictions on cross-border data transfers, your information may be transferred to and processed in countries that do not have equivalent data protection laws.

Where such transfers occur, we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission, data processing agreements with providers that maintain equivalent protections, and where applicable, adequacy decisions issued by relevant regulatory authorities. By using the Service, you acknowledge that your information may be transferred internationally in accordance with these safeguards.


Children's Privacy

Resuvo is designed for individuals who are at least 16 years of age, or the minimum digital age of consent applicable in your jurisdiction, whichever is higher. The Service is not directed at children, and we do not knowingly collect personal information from anyone below the applicable minimum age.

If we become aware that we have inadvertently collected personal information from a child below the applicable age threshold, we will take immediate steps to delete that information from our systems. If you are a parent or guardian and believe your child has provided personal information to Resuvo, please contact us at [email protected] and we will act promptly to investigate and address the matter.


Third-Party Services

Resuvo integrates with a limited number of third-party services to deliver core platform functionality. These include Stripe for payment processing, analytics tools for aggregated usage reporting, cloud infrastructure providers for secure hosting, AI model providers for AI-powered features, and transactional email services for account communications. Each provider operates under its own privacy policy and data practices, which are independent of Resuvo's.

We select our providers carefully and hold them to contractual data protection standards. However, Resuvo is not responsible for the privacy practices of third-party services beyond the obligations we contractually impose on them. We encourage you to review the privacy policies of any third-party services you interact with directly.


Compliance With Applicable Laws

GDPR

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal data. Our lawful bases for processing include performance of a contract (to provide the Service), legitimate interests (to improve the platform and maintain security), legal obligations (to comply with applicable law), and consent (for optional features such as AI training programmes, where introduced). You have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

CCPA

If you are a resident of California, the California Consumer Privacy Act (CCPA) grants you additional rights including the right to know what personal information we collect and how it is used, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right not to be discriminated against for exercising your privacy rights. To submit a CCPA request, please contact us at [email protected].

We are committed to complying with applicable privacy laws in all jurisdictions where our users are located and will update our practices as legal requirements evolve.


Changes To This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes — those that meaningfully affect your rights or how we handle your data — we will notify you in advance by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification to your account email or displaying a prominent notice within the platform.

For minor changes such as clarifications or corrections that do not affect the core substance of our practices, we may update this page without individual notice. We encourage you to review this policy periodically. Your continued use of the Service after any changes become effective constitutes your acceptance of the revised policy. If you do not agree with the revised policy, you may close your account at any time.


Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the way Resuvo handles your personal information, please reach out. We aim to respond to all privacy-related enquiries within 5 business days, and to all data subject rights requests within 30 days of receipt.

Get in touch

Privacy
[email protected]Privacy enquiries and data rights requests

Support
[email protected]General platform support and account issues

Address
Resuvo Inc.
[Street Address]
[City, State ZIP]
[Country]