Privacy Policy

This policy explains what Resmate collects when you use our website and app, why we collect it, and what you can do about it.

Resmate is operated by KeyNLP Inc., a Canadian federal corporation based in Ontario ("we", "us"). We act as the data controller for personal data processed through Resmate, under the data protection laws that apply to us, including Canada's PIPEDA and the EU General Data Protection Regulation (GDPR).

1. Information we collect

Information you give us

• Account details: your name, email address and password. We store the password as a secure hash, never as plain text. If you add a profile photo, we store that too.
• Google sign-in: if you sign in with Google, Google shares your name, email address and profile picture with us.
• Your resumes: everything you write in the editor or import, such as your work history, education, skills and contact details.
• Files you upload: the text we extract from resumes, LinkedIn PDFs and job postings that you import or attach in the coach.
• Coach conversations: the messages you send the coach and its replies.
• Purchases: when you buy credits, Stripe handles your card details. We receive the pack you bought, the amount and the date. We never see your full card number.
• Support emails: your email address and what you write to us.

Information collected automatically

• Essential cookies that keep you signed in to the app.
• Server request logs, such as IP address, browser type and the time of each request. We use them for security and to fix problems.
• Vercel Analytics on this website: anonymous page views, referrers and device types, collected without cookies.

2. How we use your information

• To run Resmate: the editor, the coach, resume import and PDF export.
• To process payments and keep track of your credit balance.
• To send account emails, such as email verification and password resets.
• To answer your support requests.
• To fix problems and improve the coach, which includes reviewing records of AI requests.
• To keep the service secure and prevent abuse.
• To meet legal obligations, such as keeping tax records.

We don't use your resumes or conversations for advertising, and we don't build advertising profiles.

3. How the AI coach handles your data

When you import a file or talk to the coach, we send the parts of your resume it needs, your message and any attached text to Azure OpenAI Service, which is run by Microsoft. Microsoft doesn't use this data to train its AI models.

We keep a record of each AI request and its response so we can fix problems and improve the coach. Only our team can see these records, and we delete them when you delete your account.

4. Sharing your information

We never sell your data or share it for advertising. We share it only in these cases:

• With service providers that help us run Resmate:
  • Microsoft Azure, for hosting, our database and AI processing (privacy statement)
  • Stripe, for payments (privacy policy)
  • Vercel, for hosting and analytics on this website (privacy policy)
  • Resend, for account emails such as email verification and password resets (privacy policy)
  • Google, for sign-in if you choose it (privacy policy)
• When the law, a court order or the protection of our rights and safety requires it.
• If Resmate is merged, acquired or sold. We'll tell you before that happens.

5. Legal bases for processing (GDPR)

• Contract: to provide the service you signed up for.
• Legitimate interests: to keep the service secure, fix problems and improve it, where this doesn't override your rights.
• Consent: where you've given it. You can withdraw it at any time.
• Legal obligation: for example, keeping tax records.

6. How long we keep data

• Your account, resumes, uploaded files, coach conversations and AI request records: until you delete them or your account.
• Purchase records: 7 years, for tax and legal reasons.
• Support emails: up to 7 years after your last message, then deleted.
• Server request logs: 30 days.

You can delete any resume in the app at any time. To delete your account and everything in it, email us at support@resmate.app. We'll do it within 30 days.

7. Security

We protect your data with encryption in transit and at rest, access controls and secure hosting. No way of sending or storing data over the internet is completely secure, so we can't guarantee absolute security.

8. Your rights

Depending on where you live, you can ask us to:

• give you a copy of the personal data we hold about you
• correct data that's wrong or incomplete
• delete your data, unless the law requires us to keep it
• send your data to another service
• restrict or object to some processing
• stop processing that's based on your consent

Email support@resmate.app to use any of these rights. We'll reply within 30 days.

If you think we've mishandled your data, you can complain to a data protection authority. In the EU, that's your local authority. In Canada, it's the Office of the Privacy Commissioner of Canada.

9. Cookies

The app uses essential cookies to keep you signed in. Stripe sets its own essential cookies during checkout to process payments and prevent fraud. We don't use advertising or cross-site tracking cookies, and the analytics on this website don't use cookies at all.

10. International data transfers

Our servers and AI processing run on Microsoft Azure in the United States. Stripe, Vercel and Resend may also process data in the United States or other countries. Each of these providers runs its own data protection program, with safeguards for international transfers.

11. Children

Resmate isn't meant for anyone under 16, and we don't knowingly collect data from children under 16. If you believe a child has given us personal data, email us and we'll delete it.

12. Changes to this policy

We may update this policy. When we do, we'll change the date at the top. If a change affects how we use your personal data, we'll email you before it takes effect.

13. Contact

Questions about this policy or your data? Email KeyNLP Inc. at support@resmate.app.