Privacy Policy

Resumaly provides three main tools for preparing job applications: the Resume Builder, the AI Cover Letter Generator, and the ATS Resume Checker. We handle information differently depending on which tool you use. This Privacy Policy explains what information may be processed, where it goes, why it is used, and how long it may be retained.

1. Information You May Provide

Depending on the tool or feature you use, information may include:

• Resume details such as your name, contact information, location, education, employment history, skills, projects, and achievements.
• Cover-letter details such as your name, email address, phone number, location, LinkedIn or portfolio URL, current role, relevant experience, skills, achievements, and reason for applying.
• Job information such as job title, company name, hiring-manager name, and the job description.
• Resume files you upload to the ATS Resume Checker, currently PDF files, and text extracted from those files.
• Writing preferences, instructions, and other information you choose to enter into an AI-powered tool.
• Optional feedback you submit through a feedback form, including the feedback category, message, and any email address you choose to provide.
• Messages you send to our support email or through other contact methods.

2. How Each Resumaly Tool Handles Your Information

2.1 Resume Builder

The core Resume Builder runs in your browser. Resume details you enter into the core builder are stored locally in your browser on your device, rather than in a Resumaly user-resume database. The core builder does not send those resume details to Resumaly's application servers or to an AI provider as part of ordinary resume editing and PDF export.

This browser storage may be removed when you clear site data, clear browser storage, use private browsing, change devices, or otherwise remove the relevant local data. Resumaly cannot restore information that exists only in your browser. Please download and keep your own copy of your resume.

2.2 AI Cover Letter Generator

When you use the Cover Letter Generator, the information you enter is submitted to Resumaly's server so the request can be prepared and sent to OpenAI's API. Depending on the fields you complete, this may include your name, email, phone, location, LinkedIn or portfolio URL, current role, experience, skills, achievements, reason for interest, job title, company, hiring-manager name, job description, and writing preferences.

The generator uses this information to prepare the AI request and return the generated cover letter and related job-match information. The saved application code uses a short-lived server session for security and request-throttling information, such as a CSRF token and generation cooldown; it does not use that session as a saved candidate profile or resume database.

Resumaly does not intentionally create a permanent user document or profile from the information submitted to the Cover Letter Generator. However, limited diagnostic information from an AI-provider error response may be written to server error logs when a request fails. Those logs are separate from a user resume database, and their retention depends on the server and hosting configuration.

2.3 ATS Resume Checker

When you use the ATS Resume Checker, you may upload a PDF resume and optionally provide a job description. The PDF is temporarily uploaded to Resumaly's server so the application can extract its text. The saved checker implementation specifies that the temporary PDF is deleted after processing, including when processing fails.

The extracted resume text and any submitted job description are temporarily held in a server-side session while the analysis is generated. After the results are generated, the raw extracted resume text and job description are removed from that session. The result session is subject to a temporary expiry period. Resumaly does not use the checker to build a permanent resume database.

The original PDF file is used by the checker for text extraction; the AI request receives the extracted text and, when supplied, the job description rather than the original PDF file.

The checker also uses a usage-limit cookie and a derived, non-reversible identifier for rate limiting and abuse prevention. These measures help protect the service and manage free usage. A broader network-level limit may also apply.

3. AI Processing and OpenAI

The saved Cover Letter Generator and ATS Resume Checker backend implementations reviewed for this policy send their AI requests to OpenAI through its API. The Cover Letter Generator sends candidate-provided details and job information. The ATS Resume Checker sends extracted resume text and, where provided, the job description.

OpenAI is an independent service provider. Information submitted to an AI tool is transmitted to OpenAI for processing so it can return the requested output. OpenAI's own terms, data controls, and retention rules apply to that processing. Resumaly does not control OpenAI's independent systems or retention practices.

You can review OpenAI's current documentation: OpenAI API — Data Controls .

The code reviewed for this update shows OpenAI as the configured AI provider. If Resumaly enables another provider, such as Anthropic's Claude, we will update this notice to identify that provider and link to its applicable privacy and retention documentation.

4. Feedback and Support Messages

If you submit feedback through the ATS Resume Checker's optional feedback form, the feedback category, your message, and any optional email address you provide are stored so we can review the feedback, investigate reported issues, and improve the service. Please do not include your resume or other sensitive information in a feedback message.

If you email contact@resumaly.com, we receive the information included in your message and may retain the correspondence to respond to you and maintain support records.

5. Cookies, Browser Storage, and Usage Limits

Resumaly uses different forms of browser storage for different purposes:

• Local browser storage: Stores the resume details you enter into the core Resume Builder on your device.
• Session cookies: Used by certain application features for security, session integrity, and request throttling.
• Usage-limit cookie: Used by the ATS Resume Checker to help enforce free usage limits and prevent automated abuse.
• Analytics and advertising cookies or similar technologies: May be used by third-party analytics and advertising services on pages where those services are enabled.

You can manage or delete browser cookies and local storage through your browser settings. Deleting local storage may also delete resume information saved in the core Resume Builder.

6. Analytics and Advertising

Resumaly uses or may load third-party measurement and advertising services on pages where they are enabled, including Google Analytics, Google AdSense, and Google's consent or advertising services. These services may use cookies, browser identifiers, device and browser information, page activity, and advertising interactions to measure site usage, deliver ads, prevent repeated ad impressions, and report advertising performance.

Information collected by these providers is handled under their own policies and settings. For more information, see:

• Google's Privacy Policy
• How Google AdSense Uses Cookies

You can also review Google's advertising settings and the cookie or consent choices made available in your browser or through Google's services.

7. Technical Information and Server Logs

When you visit a website, the hosting and security infrastructure may process technical request information needed to deliver, protect, and troubleshoot the service. Depending on the server configuration, this may include IP address, request time, requested page, browser or device information, and error details. The exact information and log-retention period depend on the hosting and server configuration.

Some application error paths may also write limited diagnostic information to server error logs. As described above, a failed AI request may result in a limited excerpt of the AI provider's error response being logged. We do not use these logs to create a permanent resume database.

8. How We Use Information

Information processed through Resumaly may be used to:

• Provide the specific resume, cover-letter, or ATS-checking tool you request.
• Transmit the information needed for an AI request to OpenAI and return its response.
• Maintain application security, validate requests, prevent abuse, and enforce usage limits.
• Review feedback and respond to support messages.
• Understand website usage and measure advertising or service performance through enabled third-party services.
• Diagnose technical errors and maintain the website.

9. When Information Is Shared

Resumaly does not sell your resume content or publish it for employers or other visitors. Information may be transmitted to or processed by the following parties when needed to operate the services:

• OpenAI: Receives the content needed to generate cover letters and ATS analysis.
• Hosting and infrastructure providers: Support website delivery, temporary file handling, sessions, and security.
• Analytics and advertising providers: Such as Google Analytics and Google AdSense on pages where enabled.
• Support and communications providers: May process messages you send to our published contact channels.

Third-party providers process information under their own terms and privacy policies. We do not control their independent practices.

10. Data Security

We use measures intended to protect information during processing, including HTTPS, protected session cookies, request validation, upload validation, temporary randomized filenames, restricted upload locations, and server-side file-size limits where implemented. No website or internet transmission can be guaranteed to be completely secure.

11. Your Choices and Requests

• You can use the core Resume Builder without submitting resume details to the AI tools.
• You can choose not to submit a resume, job description, or other information to an AI-powered feature.
• You can clear the local browser storage used by the core Resume Builder, but doing so will delete the locally saved resume data.
• You can manage cookies and browser storage through your browser settings and use available Google advertising or privacy settings.
• You can contact us with questions or requests concerning feedback information or support correspondence you have submitted.

Depending on the privacy laws applicable to you, you may have rights to request access to, correction of, or deletion of certain personal information. Contact us using the details below and we will review your request.

12. Third-Party Websites

Resumaly may link to third-party websites and services. Their content, privacy policies, and data practices are outside our control. Please review the relevant third party's privacy information before providing information to it.

13. Changes to This Privacy Policy

We may update this Privacy Policy when our tools, service providers, or data handling practices change. We will publish the revised policy on this page and update the "Last Updated" date. Please review this page periodically.