Privacy Policy

ResumeMatch AI ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it when you use our website and services at resumematch.ai (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information you provide directly

• Email address — collected when you sign up for a trial or log in. Used to send you authentication magic links and service-related communications.
• Resume files (PDF) — uploaded by you for analysis. Text content is extracted client-side and stored in our database to enable your analysis history.
• Job description text — entered by you for keyword matching. Stored in our database to enable deduplication and analysis history.

1.2 Information collected automatically

• Usage data — including the number of analyses performed, timestamps of activity, and general interaction patterns with the Service.
• Session data — we use HTTP-only JWT session cookies to maintain your authenticated session. These cookies are not used for advertising tracking.
• Log data — our servers may log standard information such as IP address, browser type, and referring URLs for security and operational purposes.

1.3 Information we do not collect

We do not collect payment information directly (if payments are introduced, they will be handled by a third-party payment processor). We do not use third-party advertising trackers or sell your personal data to any third party.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Authenticate your identity via magic link emails
• Store and display your analysis history
• Prevent duplicate analyses and manage deduplication
• Respond to your inquiries or support requests
• Monitor and protect the security and integrity of the Service
• Comply with applicable legal obligations

We do not use your resume content or job description data to train machine learning models or share it with any third party beyond what is necessary to operate the Service.

3. Legal Basis for Processing (EEA / UK Users)

If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:

• Contract performance — to provide you with the Service you requested
• Legitimate interests — for security monitoring, fraud prevention, and service improvement
• Legal obligation — where we are required to process data to comply with applicable law
• Consent — where you have explicitly opted in to receive communications from us

4. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with:

• Resend — our transactional email provider, used to deliver magic-link authentication emails. Resend processes your email address under its own privacy policy.
• Database / hosting infrastructure — your data is stored in a PostgreSQL database hosted via Supabase. Data is encrypted at rest and in transit.
• Legal authorities — where required by law, court order, or to protect our legal rights.

All third-party service providers are required to handle your data in accordance with applicable privacy laws and our data processing agreements.

5. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide you with the Service. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Analysis records (match scores and keyword lists) may be retained in aggregated, anonymized form for service improvement purposes after account deletion.

6. Cookies and Session Management

We use a single HTTP-only session cookie to maintain your authenticated session. This cookie is strictly necessary for the Service to function and is not used for advertising or behavioral tracking. It expires when you log out or after a defined period of inactivity.

We do not currently use analytics cookies, advertising cookies, or third-party tracking scripts. If this changes, we will update this policy and, where required, obtain your consent.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. These include encrypted data transmission (HTTPS), HTTP-only session cookies, and access controls on our database.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data ("right to be forgotten")
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — request that we limit how we use your data
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at privacy@resumematch.ai. We will respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete it.

10. International Data Transfers

Your data may be stored or processed in countries outside your own. Where we transfer personal data from the EEA or UK to a country that does not have an adequacy decision, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, in accordance with applicable data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on our website before the changes take effect. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us: