Legal

Third-Party Software Policy

Last updated September 10, 2026 · Version 2

Draft - pending legal review. This document describes how ResumeRama actually works today and is written to be accurate, but it has not yet been reviewed by a qualified lawyer. It is not legal advice. We publish it in this state so you can read our real practices now rather than wait.

ResumeRama is built on services run by other companies. Each one is listed here with what it receives, because “we use trusted partners” tells you nothing.

Who we rely on

ServiceWhat it doesWhat it receivesWhere
ClerkSign-in and account securityYour email, name, sign-in profile and sessionUnited States
Microsoft Azure AI (DeepSeek-V4-Pro)The AI that rewrites your resumeYour resume content and the job description, with contact details removedUnited States - Azure East US
Microsoft AzureHosting, application databaseAll application dataCanada (Canada Central)
CloudflareDNS and traffic protectionRequest metadata, including your IP addressGlobal edge network
StripePaymentsYour payment details, sent directly to themUnited States / global
PayPalPayments, where offeredYour payment details, sent directly to themUnited States / global
Payload CMSPublishes our marketing and legal contentNo personal dataSelf-hosted alongside the app

What each one is bound by

These providers process data on our instructions under their own terms and data-processing agreements. We remain responsible to you for how they handle it - under Australian Privacy Principle 8 that accountability is explicit, and we take the same position everywhere else. TODO: confirm - data-processing agreements in place for Clerk, the AI providers, and PayPal.

What we deliberately do not use

No analytics provider. No advertising network. No email marketing platform. No third-party error-tracking or session-replay service. Every one of those would mean another company receiving data about you, and none of them is necessary to tailor a resume.

Open-source software

ResumeRama is built with open-source software used under its respective licences. We do not send your personal data to those projects; they are code we run, not services we call.

Changes

If we add or replace a provider that receives personal data, we will update this page and the Privacy Policy, and where the change is material we will ask you to re-accept.