ResumeGlow ("we," "us," or "our") operates the website at resumeglow.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using ResumeGlow, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

Account Information: When you create an account, we collect your email address, display name, and avatar (if provided). You may sign up via email/password or through a third-party provider (Google).
Resume Content: Contact details, work experience, education, skills, certifications, objectives, and interests that you enter into the resume editor.
Job Descriptions: Text, URLs, or images of job postings you provide for AI tailoring.
Professional Profile: Optional career details such as achievements, key experiences, and career notes used to improve AI-generated content.

1.2 Information Collected Automatically

Usage Data: We log which features you use (e.g., AI tailoring, exports, cover letter generation) to enforce usage limits and improve the Service. We do not track browsing behavior across other websites.
Device & Browser Information: Standard HTTP headers (browser type, operating system, IP address) transmitted by your browser when accessing the Service.

1.3 Information From Third Parties

Google OAuth: If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not access your Google contacts, Gmail, Drive, or any other Google services beyond basic profile information needed for authentication.

2. How We Use Your Information

Provide, operate, and maintain the Service
Generate AI-tailored resume content, cover letters, and interview preparation materials
Process and deliver resume exports (PDF)
Authenticate your identity and manage your account
Enforce usage limits and prevent abuse
Communicate with you about your account or changes to the Service
Comply with legal obligations

3. AI Processing & Third-Party APIs

ResumeGlow uses the OpenAI API to provide AI-powered features (resume tailoring, cover letter generation, interview Q&A, and OCR). When you use these features, relevant portions of your resume and job description data are sent to OpenAI for processing. OpenAI's use of this data is governed by their API data usage policy. As of this writing, OpenAI does not use API inputs to train their models.

4. Data Sharing & Disclosure

We do not sell your personal information. We may share data only in these circumstances:

Service Providers: We use Supabase (hosting/database), OpenAI (AI processing), and Stripe (payment processing) to operate the Service. These providers access only the data necessary to perform their functions.
Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

5. Data Retention

We retain your account and resume data for as long as your account is active. You may delete your account at any time from the Settings page, which will permanently remove your profile, resumes, and associated data from our systems. Cached job scraping data is retained for up to 24 hours and then automatically purged.

6. Data Security

We implement industry-standard security measures including encrypted connections (TLS/HTTPS), secure authentication via Supabase Auth, row-level security policies on our database, and server-side API key management. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Your Rights & Choices

All Users (US & Canada)

Access & Portability: You can view and export your resume data at any time through the editor.
Correction: You can update your information directly in the editor or account settings.
Deletion: You can delete your account and all associated data from the Settings page.
Withdraw Consent: You may stop using AI features at any time. You may revoke Google OAuth access from your Google account settings.

California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, request deletion of their data, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below.

Canadian Residents (PIPEDA)

Canadian residents have the right to access their personal information, challenge its accuracy, and withdraw consent for its collection and use. Your data is processed and stored in the United States. By using the Service, you consent to this transfer. To exercise your rights, contact us at the email below.

8. Cookies & Local Storage

ResumeGlow uses essential cookies for authentication session management. We also use browser local storage to save editor preferences and AI tailor checkpoints for your convenience. We do not use advertising or third-party tracking cookies.

9. Children's Privacy

ResumeGlow is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: privacy@resumeglow.app