Privacy Policy

This Privacy Policy explains what personal information ResumeSquare(“we”, “us”) collects, how we use it, who we share it with, and the choices you have. By using ResumeSquare(“the Service”) you agree to the practices described here.

We collect only what we need to run the Service:

• Account information. When you sign in, our authentication provider (Firebase Authentication) gives us an account identifier and, depending on how you sign in, your email address and name. We practise data minimisation and do not store a separate phone number at the account level.
• Resume content. The information you enter into your resumes — such as your name, contact details, work history, education, and skills. This is content you choose to provide.
• Payment information. When you pay, our payment provider (Razorpay in India; Stripe for international payments, when available) processes the transaction. We receive a payment/order reference and status. We do not receive or store your full card details.
• Technical and usage data. Basic technical information such as your approximate country (derived from your network for currency selection), browser type, and request logs needed to operate and secure the Service.

We use your information to:

• create and maintain your account and authenticate you;
• render, store, and export your resumes;
• process payments and unlock downloads;
• show prices in the appropriate currency for your region;
• operate, secure, debug, and improve the Service;
• comply with legal obligations and resolve payment disputes.

We use a small number of functional cookies. We do not use advertising cookies.

• Session cookie — keeps you signed in after authentication.
• Region cookie (rw_region) — remembers whether you chose ₹ INR or $ USD pricing.

Your theme preference may also be stored locally in your browser. You can clear cookies and local storage through your browser settings at any time.

We share data with a limited set of processors strictly to operate the Service. They act on our instructions and under their own privacy and security obligations:

• Firebase Authentication (Google) — sign-in and account identity.
• Database hosting (Neon / PostgreSQL) — stores your account and resume data.
• Razorpay — payment processing in India.
• Stripe — international payment processing (when available).
• Hosting and network providers — serving the application and protecting it from abuse.

We do not sell your personal data. We do not share your contact details with recruiters or use them for telemarketing or sales calls. We do not use your resume content for purposes unrelated to providing the Service to you.

Where the GDPR or similar laws apply, we rely on the following lawful bases:

• Contract — to provide the Service you sign up for (account, resume building, downloads).
• Legitimate interests — to secure, debug, and improve the Service and prevent abuse, balanced against your rights.
• Legal obligation — to retain payment and tax records.
• Consent — where specifically requested; you may withdraw it at any time.

We keep data only as long as we need it:

• Account and resume data— for as long as your account is active. When you delete your account, this data is erased promptly (see “Your rights”).
• Payment and tax records — retained for up to 6 years to meet accounting and tax obligations, then deleted. After account deletion these records are kept in pseudonymised form (your identifying details removed, transaction details retained).
• Operational logs — kept for a short period for security and debugging, then rotated out.

We take reasonable technical and organisational measures to protect your information:

• Encryption in transit — all traffic is served over HTTPS/TLS.
• Encryption at rest — our database encrypts stored data, and we additionally apply application-level AES-256-GCM encryption to sensitive resume content, so a database or backup compromise exposes only ciphertext.
• Access controls — access to systems and data is restricted and authenticated.
• Data minimisation — we avoid collecting data we do not need.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We maintain procedures to detect and respond to personal-data breaches. If a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where required, within 72 hours of becoming aware of it, and we will inform affected users where the law requires.

Depending on your location, you may have the right to access, correct, export, restrict, or object to processing, and to delete (erase) your personal data.

Erasure / right to be forgotten.You can delete your account at any time from your dashboard (“Delete account”). This immediately erases your resumes and identifying account details and removes your sign-in identity. We retain only the minimal payment/tax records the law requires, in pseudonymised form. You can also request erasure by email.

To exercise any of these rights, contact support@resumesquare.app. You also have the right to lodge a complaint with your local data-protection authority.

ResumeSquareis operated from India and serves users in multiple countries. By using the Service, you understand that your information may be processed in India and in the regions where our service providers operate. We rely on those providers’ safeguards for any cross-border transfers.

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. The “Last updated” date below shows when it last changed. Material changes take effect when posted on this page.

For privacy questions or to exercise your rights, contact support@resumesquare.app.