Privacy Policy

0 Overview

Easy Resumes AI ("Easy Resumes AI," "we," "us," or "our") operates the website EasyResumesAI.com and all associated services (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

1 Information We Collect

We collect information in three ways: information you give us directly, information collected automatically when you use the Service, and information from third-party services you connect.

1.1 Information You Provide Directly

• Account information — When you create an account, we collect your name and email address.
• Resume and document content — When you upload a resume or paste job description text, we process that content to provide ATS scoring and optimization suggestions. This may include your employment history, education, skills, and other personal details you include in your resume.
• Payment information — If you purchase a paid plan, payment is processed by our third-party payment processor (Stripe). We do not store full credit card numbers on our servers. We receive a confirmation and limited billing details (e.g., last four digits, card type, billing postal code).
• Communications — If you contact us via email or a support form, we retain the content of those messages.

1.2 Information Collected Automatically

• Log data — Our servers automatically record information including your IP address, browser type, operating system, referring URLs, pages visited, and the date and time of each request.
• Usage data — We collect data about how you interact with the Service: which features you use, how often, and how long sessions last.
• Device information — We collect device identifiers, screen resolution, and language settings to optimize the Service for your device.
• Cookies and similar technologies — See Section 5 (Cookies & Tracking) for full details.

1.3 Information from Third Parties

If you sign in via a third-party identity provider (e.g., Google OAuth), we receive the profile information that provider makes available, typically your name, email address, and profile picture. We do not request access to data beyond what is necessary for authentication.

2 How We Use Your Information

We use the information we collect to:

• Provide the Service — Process your resume, calculate ATS scores, generate optimization suggestions, and deliver the results to you.
• Maintain and improve the Service — Diagnose bugs, analyze usage patterns, and develop new features.
• Communicate with you — Send transactional emails (account confirmation, password reset, receipts), and if you opt in, product updates and tips.
• Personalize your experience — Remember your preferences and previously uploaded documents.
• Process payments — Fulfill purchases and manage subscriptions.
• Comply with legal obligations — Respond to lawful requests from governmental authorities and enforce our Terms of Service.
• Protect safety and security — Detect, investigate, and prevent fraudulent or harmful activity.

Legal Bases for Processing (EEA / UK Users)

Where GDPR applies, we process your personal data under one or more of the following legal bases:

• Performance of a contract — Processing necessary to provide the Service you requested.
• Legitimate interests — Improving the Service, preventing fraud, and ensuring security, where those interests are not overridden by your rights.
• Consent — Where you have given us explicit consent (e.g., opting into marketing emails). You may withdraw consent at any time.
• Legal obligation — Compliance with applicable laws and regulations.

3 Sharing Your Information

We do not sell, rent, or trade your personal data. We may share information in the limited circumstances described below.

3.1 Service Providers

We work with trusted third-party vendors who process data on our behalf under strict data processing agreements. These include:

• Stripe — Payment processing
• Google Cloud / AWS — Cloud hosting and infrastructure
• SendGrid / Resend — Transactional email delivery
• Analytics providers — Aggregate, anonymized usage analytics

These providers are only permitted to use your data to perform services for us and are contractually bound to protect it.

3.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

If Easy Resumes AI is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service prior to your data being transferred and becoming subject to a different privacy policy.

3.4 With Your Consent

We may share your information for any other purpose with your explicit prior consent.

4 Cookies & Tracking Technologies

We use cookies and similar tracking technologies (such as local storage and pixel tags) to operate and improve the Service.

Types of Cookies We Use

• Essential cookies — Required for the Service to function (e.g., session authentication, CSRF protection). These cannot be disabled.
• Preference cookies — Remember your settings, such as your chosen color theme (light/dark mode).
• Analytics cookies — Help us understand how users interact with the Service so we can improve it. Data is aggregated and anonymized where possible.
• Performance cookies — Monitor site performance and error rates.

Your Cookie Choices

You can control cookies through your browser settings. Disabling non-essential cookies will not prevent you from using core Service features, but some personalization may be lost. You may also opt out of analytics tracking by using browser extensions that honor Do Not Track signals.

We do not use cookies to serve you behavioral advertising on third-party websites.

5 Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:

• Account data — Retained while your account exists and for up to 30 days after deletion, then permanently purged.
• Resume content — Stored to power your dashboard history. You can delete individual documents at any time from your account settings.
• Payment records — Retained for 7 years to meet accounting and tax obligations.
• Log data — Retained for up to 90 days for security and debugging, then deleted or anonymized.
• Support communications — Retained for up to 3 years to maintain service quality records.

When you request account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law.

6 Security

We implement industry-standard security measures to protect your information:

• All data in transit is encrypted using TLS 1.2 or higher.
• Passwords are hashed using a modern, salted hashing algorithm (bcrypt).
• Access to production systems is restricted to authorized personnel using multi-factor authentication.
• We conduct regular security reviews and vulnerability assessments.
• Sensitive data at rest is encrypted using AES-256.

7 Your Rights & Choices

Depending on where you live, you may have the following rights regarding your personal data:

California Residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act:

• The right to know what personal information we collect, use, disclose, and sell.
• The right to delete personal information we have collected.
• The right to opt out of the sale or sharing of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.
• The right to correct inaccurate personal information.
• The right to limit use and disclosure of sensitive personal information.

To submit a CCPA request, email us at privacy@easyresumesai.com with "CCPA Request" in the subject line.

EEA / UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the rights described above under GDPR. You also have the right to lodge a complaint with your local data protection authority. To exercise your rights, contact us at privacy@easyresumesai.com. We will respond within 30 days.

Marketing Communications

You can opt out of marketing emails at any time by clicking "Unsubscribe" in any email or by emailing us. You will continue to receive transactional messages (receipts, password resets) regardless of your marketing preference.

8 Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have inadvertently collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@easyresumesai.com.

9 International Data Transfers

Easy Resumes AI is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the U.S. or other countries where our service providers operate.

For transfers of personal data from the EEA or UK to countries that the European Commission has not deemed to provide an adequate level of data protection, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to your registered email address at least 14 days before the changes take effect.
• Display a prominent notice on the Service.

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy. If you do not agree to the updated policy, please delete your account and stop using the Service.

11 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: