Privacy Policy

JDResu.me(“we”, “us”, or “our”) operates the resume building service available at https://jdresu.me. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Service.

If you have questions about this policy, contact us at contact@jdresu.me.

We collect the following categories of information:

We do not intentionally collect sensitive personal data such as government ID numbers, financial account information, biometric data, or health information. Please do not include such information in your resumes or uploads.

We use the data we collect to:

• Provide, operate, and maintain the Service
• Authenticate your identity and keep your account secure
• Store, display, and export your resume content
• Generate PDFs and other file formats from your resume data
• Power AI-assisted features (writing suggestions, content improvement)
• Send transactional emails (account creation, security alerts)
• Analyze usage patterns to improve the Service
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not use your data for:

• Selling your personal information to third parties
• Targeted advertising or ad networks
• Building advertising profiles
• Training AI models on your resume content without explicit opt-in consent

If you are in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract: Processing necessary to provide the Service you requested (e.g., storing your resume, generating exports)
• Legitimate Interests: Processing necessary for our legitimate business interests such as security, fraud prevention, and service improvement, where these interests are not overridden by your rights
• Legal Obligation: Processing required to comply with applicable laws
• Consent: For optional features such as marketing communications or AI content processing (where consent is explicitly requested)

We share your data with third parties only in the following circumstances:

• Authentication Providers (GitHub, Google): When you sign in using OAuth, we receive basic profile data from these providers. Their respective privacy policies apply to data they hold.
• Cloud Infrastructure: We use cloud hosting and database providers (such as Vercel, Supabase) to store and process your data. These providers act as data processors and are contractually bound to protect your data.
• AI Service Providers: If you use AI-powered features, your submitted content may be processed by third-party AI APIs. We endeavor to ensure these providers do not use your data for training without consent.
• PDF Generation: Resume data may be sent to a headless browser or rendering service to generate PDF exports. This data is not retained by the rendering service beyond the duration of the request.
• Analytics (Google Analytics): We use Google Analytics to understand how the Service is used (e.g., which pages are visited, traffic sources, device types). Google Analytics may set cookies and collect IP addresses. See Section 8 for full details and opt-out options.
• Legal Requirements: We may disclose your data when required to do so by law, court order, or government authority.

We do not sell, rent, or trade your personal data to any third party for commercial purposes.

JDResu.me may allow you to make your resume publicly accessible via a unique URL. If you choose to enable public sharing:

• Your resume will be viewable by anyone who has the link, including search engine crawlers
• Your public resume may be indexed by search engines (you can disable this in settings)
• You are solely responsible for what personal information you include in a publicly shared resume
• You can disable public sharing at any time from your resume settings, after which the public URL will no longer display your resume

We strongly recommend reviewing your resume carefully before making it public and avoiding sharing sensitive information such as your full national ID, passport numbers, or bank details.

We use the following types of cookies and local storage:

• Strictly Necessary: Session cookies required for authentication and keeping you logged in. These cannot be disabled without breaking the Service.
• Functional: Cookies that remember your preferences (e.g., editor settings, theme preference).
• Analytics (Google Analytics): Google Analytics sets cookies (e.g., _ga, _gid) to distinguish users and sessions. You can opt out using the Google Analytics Opt-out Browser Add-on or by configuring your browser to block cookies.

We do not use third-party advertising cookies or tracking pixels. You can control cookies through your browser settings; however, disabling necessary cookies will prevent you from using the Service.

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data: Retained until you delete your account, then removed within 30 days
• Resume Content: Retained until you delete it or your account, with a grace period of up to 30 days
• Uploaded Files: Retained until you delete them, your account, or we remove them for policy violations
• Log Data: Retained for up to 90 days for security and debugging purposes
• Anonymized Analytics: May be retained indefinitely as they cannot be linked to an individual

We may retain certain data for longer periods where required by law or for legitimate legal defense purposes.

We implement industry-standard security measures to protect your data, including:

• HTTPS/TLS encryption for all data in transit
• Encryption at rest for stored data
• Secure OAuth-based authentication (no password storage)
• Access controls limiting who can access production data
• Regular security reviews of our codebase and infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you discover a security vulnerability, please responsibly disclose it to us at contact@jdresu.me.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data (most data can be updated directly in your account settings)
• Erasure:Request deletion of your personal data (“right to be forgotten”). You can delete your account directly in settings.
• Portability: Export your resume data in machine-readable formats (JSON export is available in the Service)
• Restriction: Request that we restrict processing of your data in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us at contact@jdresu.me. We will respond within 30 days. We may need to verify your identity before fulfilling requests.

If you are in the EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under this age.

If you believe a child has provided us with personal information, please contact us at contact@jdresu.me and we will take steps to delete such information promptly.

Your data may be processed in countries other than your country of residence. Where we transfer data from the EEA or UK to third countries, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Other legally recognized transfer mechanisms

By using the Service, you acknowledge that your data may be transferred to and processed in countries with different data protection standards than your own.

When you use AI-powered features in JDResu.me:

• The content you submit (e.g., job description, resume section) is sent to our AI processing pipeline, which may involve third-party AI API providers
• We use commercially available AI APIs. The data you submit may be subject to the respective AI provider's data usage policies
• We configure our AI API usage to opt out of data being used for third-party model training where such options are available
• AI-processed data is not retained by us beyond what is necessary to return the result to you
• You can choose not to use AI features; they are optional enhancements

We use Google Analytics, a web analytics service provided by Google LLC (“Google”). Google Analytics uses cookies and similar technologies to collect and analyze information about your use of the Service, including:

• Pages you visit and how long you spend on them
• How you arrived at the Service (search engine, direct, referral)
• Approximate geographic location (country and city, derived from IP address)
• Device type, operating system, and browser
• Events such as button clicks and form interactions (if configured)

IP Anonymization: We configure Google Analytics with IP anonymization enabled, meaning your full IP address is never stored by Google; the last octet is zeroed before storage.

Data Retention:Analytics data is retained for 14 months, after which it is automatically deleted from Google's servers.

Opt Out: You can prevent Google Analytics from tracking you by:

• Installing the Google Analytics Opt-out Browser Add-on
• Enabling “Do Not Track” in your browser settings
• Using a browser extension that blocks analytics tracking
• Blocking cookies in your browser settings

Google's privacy practices are governed by the Google Privacy Policy. Google Analytics data is processed and stored on Google's servers, which may be located outside your country of residence.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale of your personal information
• The right to non-discrimination for exercising your privacy rights

We do not sell your personal information. To exercise any CCPA rights, contact us at contact@jdresu.me.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page
• Notify registered users via email for material changes
• Display a prominent notice on the Service for significant changes

We encourage you to review this policy periodically. Your continued use of the Service after any changes indicates your acceptance of the updated policy.

For privacy-related questions, requests, or concerns, please contact our privacy team at:

• Email: contact@jdresu.me
• Security issues: security@jdresu.me

We aim to respond to all privacy inquiries within 30 days.