This policy explains how Resumeter (the "Service"), operated by an individual sole operator trading as Resumeter ("we", "us"), handles your data. We are the data controller for personal data processed through the Service and can be reached at admin@resumeter.online. We collect only what we need to run your account and generate your reports.
Free ATS score: you can check your score without an account — that check is processed in memory and not saved. When you create an account and subscribe, we store your reports and the CV text they were generated from so you can re-open them, re-check, and track progress. You can export or permanently delete everything at any time from your account.
What we process, and why
Account data — your email address, password (stored only as a secure salted hash by our auth provider), optional name and country. Legal basis: performance of our contract with you. Authentication and this data are handled by Supabase as our processor.
Your CV content & job descriptions — for the free score, processed transiently and not retained. For a saved report (subscribers), the CV text and the generated report are stored in your account until you delete them, so you can re-open and re-check. Legal basis: contract.
Reports — your scores, suggestions and projected scores are stored under your account. Legal basis: contract.
AI processing — to produce the written suggestions, your CV text is sent to Google (Gemini via Google Cloud Vertex AI) as a processor. It is used to generate your report and is not used by us to train models.
Subscription & payment data — card and billing details are collected and processed directly by our payment providers, never by us: Creem (Merchant of Record, most countries) and Razorpay (India). We store only a subscription status, plan, currency and renewal date to give you access. We do not see or store your full card details. Legal basis: contract.
Analytics (optional) — if you click "Accept" on our cookie banner, we use Google Analytics to understand aggregate usage (pages, events, approximate region). If you decline, no analytics cookies are set and Google Analytics is not loaded. Legal basis: consent.
Security
Your data is stored in a managed Postgres database (Supabase) protected by row-level security, so each account can access only its own reports, profile and subscription. Data is encrypted in transit (HTTPS) and at rest. Passwords are never stored in plain text. Payment credentials never touch our servers.
Cookies
We use strictly-necessary storage to keep you signed in and to remember your language and cookie choice. Analytics cookies (Google Analytics) are only set after you accept via the cookie banner. You can withdraw consent by clearing your browser storage.
Sharing
We share data only with the processors needed to run the Service: Supabase (accounts & database), Google (AI processing), Creem and Razorpay (payments), Google Analytics (if you consent), and our hosting provider (Render). We do not sell your personal data.
International transfers
Some processors (e.g. Google, Supabase, Render) may process data outside the EU/EEA under appropriate safeguards such as Standard Contractual Clauses.
Retention
Reports & stored CV text: kept while your account exists so you can access your history; deleted when you delete a report or your account.
Account data: kept until you delete your account.
Free score: not retained after the score is produced.
Payment/transaction records: retained by Creem/Razorpay as required for tax and accounting.
Deleting your data
You can delete individual reports, or your entire account and all associated data, from your account page, or by emailing admin@resumeter.online. Deleting your account removes your profile, reports and stored CV text from our database; cancelling your subscription is handled separately (see Cancellation & Refunds).
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing and withdraw consent. To exercise your rights, use your account page or email admin@resumeter.online; we will respond within one month. You may also lodge a complaint with your data-protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).