Legal

Data Collection Policy

Last updated September 10, 2026 · Version 2

Draft - pending legal review. This document describes how ResumeRama actually works today and is written to be accurate, but it has not yet been reviewed by a qualified lawyer. It is not legal advice. We publish it in this state so you can read our real practices now rather than wait.

This is the complete list. If something is not here, we do not collect it.

What we collectWhy
The text you submit - resume content and job descriptions you paste, upload or captureIt is what the tailoring works on
Your contact block - name, email, phone and location, as parsed from your resumePrinted onto the resume and cover letter we generate for you
Your account identifier from our sign-in providerKeeps your work attached to you, and nobody else
Your tailoring history and the documents producedSo you can come back, re-download or edit them
Payment records - amount, status and the processor's referenceBilling, receipts and refunds
Your consent choices and their versionProof of what you agreed to and when

What we do not collect

No card numbers - payments go directly to our processor. No analytics or behavioural tracking; we do not use an analytics provider. No advertising profile. No data bought from anyone else. No access to your email or any other account.

Free text carries what you put in it

A resume is free text, so it can include things you did not think of as personal data - a health or disability note, a religious or political affiliation, union membership, details of family. We do not ask for any of it and make no use of it, but it travels with the rest of your resume, including to our AI provider. If you would rather it were not processed, take it out before you upload.

What leaves for AI processing

Your resume content and job description are sent to a third-party AI provider so it can be rewritten. Your contact block and profile links are not sent at all, and your name, email addresses, phone numbers, street addresses and URLs are replaced with placeholders everywhere else before the request leaves our servers. The AI Policy explains exactly what is removed and what still reaches the provider.

We do not sell your data

We do not sell it, rent it, or share it with advertisers. The Privacy Policy lists every service provider that touches it, how long we keep things, and how to delete everything.