Privacy Policy

Introduction

ResumeReady ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

Information We Collect

Information You Provide

• Account Information: Name, email address, password (encrypted)
• Resume Content: Work history, education, skills, and other information you include in your resumes
• Payment Information: Processed securely by Paystack - we don't store card details
• Support Communications: Messages you send through our support system

Information Collected Automatically

• Usage Data: Features used, pages visited, actions taken
• Device Information: Browser type, operating system, device type
• IP Address: For security and analytics purposes
• Cookies: Essential cookies for authentication and preferences

How We Use Your Information

We use your information to:

• Provide and improve our Service
• Process payments and manage subscriptions
• Generate AI-powered resume suggestions
• Send important service updates and notifications
• Respond to support requests
• Prevent fraud and ensure security
• Analyze usage patterns to improve the Service
• Comply with legal obligations

AI Processing

When you use our AI features, your resume content is processed by AI services to generate suggestions. This data is:

• Processed only to provide the requested service
• Not used to train AI models
• Not shared with third parties for marketing
• Handled in accordance with our data retention policies

Data Sharing

We may share your information with:

• Service Providers: Paystack (payments), Resend (email), cloud hosting providers
• AI Services: For resume enhancement features
• Legal Requirements: When required by law or to protect our rights

We do NOT sell your personal information to third parties.

Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (HTTPS/TLS)
• Encrypted password storage (bcrypt)
• Secure token-based authentication (JWT)
• Rate limiting to prevent abuse
• Regular security audits

Data Retention

We retain your data as follows:

• Account Data: Retained while your account is active. When you request account deletion, your account enters a 30-day grace period (to protect against accidental deletion or compromised accounts) during which no new charges are processed and you cannot log in. After 30 days, all personal data is permanently purged via our automated cleanup job.
• Resume Data: Retained while your account is active, purged with the account.
• Payment Records: Retained for 7 years for legal, tax, and audit compliance (NDPR and Nigerian tax law requirements).
• Mock Interview Sessions: We store the text transcript of your answers and AI grading so you can review past sessions. Voice recordings are NOT stored — audio is transcribed via OpenAI Whisper in real time and the raw audio is discarded immediately after transcription.
• Support Tickets: Resolved tickets older than 30 days are automatically archived/deleted by our cleanup job.
• Expired Tokens: Automatically deleted.
• Client-side Errors: Anonymized crash reports are retained to diagnose bugs; tied to your user ID only while your account is active.

Your Rights

You have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate information in your profile or resumes.
• Erasure: Delete your account — 30-day grace period, then permanent purge of all personal data.
• Data Portability: Export all your data (resumes, cover letters, applications, interview sessions, transactions) as JSON via the POST /api/auth/export-my-data endpoint (accessible from Account Settings).
• Withdraw Consent: Unsubscribe from marketing emails; remains opted-in for transactional emails (payment receipts, password resets).

To exercise these rights, contact us at support@becomeresumeready.com or use your account settings. To recover a soft-deleted account within the grace period, email support with your original email address.

Cookies

We use essential cookies for:

• Authentication (keeping you logged in)
• Security (preventing fraud)
• Preferences (saving your settings)

We do not use tracking cookies for advertising purposes.

Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us.

International Data Transfers & Subprocessors

To deliver the Service, your data is processed in countries outside Nigeria by a small number of vetted subprocessors. Each is bound by their own data-processing terms and holds recognised security certifications. As of the "Last updated" date above, these are:

• MongoDB Atlas — primary database hosting (SOC 2 Type II, ISO 27001).
• Paystack — payment processing (PCI DSS Level 1, Nigeria-headquartered).
• OpenAI — AI inference for resume/cover-letter/interview features (SOC 2 Type II). Your content is not used to train their models.
• Resend — transactional email delivery (SOC 2 Type II).
• Cloud hosting infrastructure — application servers (SOC 2 / ISO 27001 certified providers).

This list may change as we add or replace providers. Material changes will be reflected on this page. We do not transfer your data to subprocessors outside this list without first updating this section.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and post the revised policy here. We encourage you to review this page periodically. Your continued use of the Service after a change becomes effective constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions or concerns, contact us at:

• Email: privacy@becomeresumeready.com
• Support: support@becomeresumeready.com