Privacy Policy

Resumia is operated by Knock Knock Tech Ltd (DIFC commercial licence CL8426), Level 3, Innovation One, Dubai International Financial Centre, Dubai, United Arab Emirates ("we"). We are the controller of the personal data described here. Questions and requests: support@resumia.io.

What we collect

• Account: email address, password (stored only as a hash), or your Google account email if you sign in with Google.
• Career content you add: profile facts, resumes, job descriptions, interview answers, AI suggestions and your decisions on them, saved PDF records.
• Billing: plan, subscription status and a customer reference from our payment provider. We do not see or store your card details.
• Usage: counts and cost of AI requests, technical logs, and cookie-free, aggregate page analytics.

Why we use it

• To run the service you asked for (performance of a contract).
• To bill Pro and enforce plan limits (contract).
• To keep the service secure and working, and to understand aggregate usage (legitimate interests).
• To meet legal, tax and accounting duties (legal obligation).

We do not sell your data and do not use it for advertising.

How we use AI

When you analyse a job, rewrite text or use the career interview, we send your resume content without its name and email fields (anything you write in other fields, such as your summary, is sent as written), your confirmed profile facts, the job description and your interview messages to OpenAI or Anthropic. They process it to generate suggestions and return them to us. Under their API terms they do not use this data to train their models. They may keep it for a limited period, typically up to 30 days, and longer only where needed for safety or legal reasons.

AI output can be wrong. Suggestions are never applied without your review, and you can always keep your own text. Importing a file is done in your browser and does not use AI.

Who processes data for us

• Railway: hosting and database, EU (Amsterdam).
• OpenAI and Anthropic: AI suggestions, as described above.
• Polar: checkout, payments, tax and invoices. Polar is the merchant of record for Pro purchases and handles payment data under its own privacy policy.
• Resend: account and sign-in emails.
• Google: sign-in, if you choose it.
• Plausible: cookie-free, aggregate website analytics.

Some of these providers are in the United States. Where data leaves the EU, UK or DIFC, we rely on the provider's standard contractual clauses or an equivalent safeguard.

How long we keep it

We keep your account and content while your account exists. Resumes you move to trash stay in your account until you restore them, delete them forever, or delete your account. Delete forever removes the resume, its job versions, saved PDFs, job matches, AI reviews and the interviews about it right away. Entries you already saved to your experience library stay until you remove them there, and AI usage counts are kept. When you delete your account, we delete your personal data; we keep only anonymous daily AI cost totals and the billing records the law requires. Backups are overwritten in their normal rotation.

Your rights

You can access, correct, export and delete your data in the app or by writing to support@resumia.io. Depending on where you live, you may also object to or restrict processing and complain to a data protection authority, including the DIFC Commissioner of Data Protection or your local authority in the EU or UK. We reply within 30 days.

Cookies

We use only cookies and storage needed to keep you signed in and save your work. Our analytics set no cookies.

Children

Resumia is not for people under 16.

Changes

We will post updates here and email you about material changes before they take effect.