This Privacy Policy describes how Resume2Recruit ("we", "us", "our") collects, uses, and protects your personal information when you use our website at resume2recruit.com and our resume-building services (the "Service"). Resume2Recruit is operated as an unregistered sole proprietorship in India.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you sign up, we collect your name, email address, and a password. Passwords are stored as one-way bcrypt hashes and are never visible to us in plain text.

Resume Content

Any information you enter into your resume — including personal details (name, phone, location, LinkedIn URL), work history, education, skills, certifications, and achievements — is stored in our database so you can save, edit, and download your resumes.

Payment Information

All payments are processed by Razorpay. We do not store or have access to your card number, CVV, UPI ID, or bank account details. We only retain non-sensitive payment metadata from Razorpay — customer ID, subscription ID, plan, billing cycle, transaction amount, date, and status — for billing history and tax compliance.

Usage Data

We track aggregate usage counters such as number of resumes created, cover letters created, and plan tier, to enforce fair-use limits.

Technical Information

We automatically collect your IP address, browser type and user-agent, device type, and cookies for session authentication and, with your consent, analytics.

2. How We Use Your Information

To create and manage your account
To provide the resume-building, AI optimization, and PDF export features
To process payments and manage subscriptions
To enforce plan limits (resumes per month, cover letters per month)
To send transactional emails (account verification, password reset, receipts, renewal notices)
To detect fraud, abuse, and violations of our Terms of Service
To improve the Service through anonymized, aggregated analytics
To comply with applicable laws (Indian tax law, data protection law, law enforcement requests)

3. Third-Party Service Providers

We share limited data with the following processors strictly as needed to provide the Service:

Anthropic (Claude API) — US-based. Resume text is sent for AI optimization and parsing. Per Anthropic's API terms, your data is not used to train their models. SOC 2 Type II certified.
Razorpay — India. PCI-DSS Level 1 certified. Handles all card, UPI, and netbanking transactions.
MongoDB Atlas — India region. Database hosting.
Render — backend hosting.
Vercel — frontend hosting.
Resend — transactional email delivery.
Google Analytics 4 — anonymized usage analytics. Only enabled with your explicit cookie consent.

We do not sell your personal data to any third party, ever.

4. Cookies

Essential cookies — session authentication (JWT). Required for the Service to function. No consent needed.
Analytics cookies — Google Analytics. Opt-in only, via the cookie banner. You can revoke consent anytime by clearing browser cookies.
We do not use advertising, retargeting, or cross-site tracking cookies.

5. Your Rights

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Erase your account and associated data
Port your data — export all your resumes as JSON on request
Withdraw consent for analytics cookies or marketing emails
Lodge a grievance with our Grievance Officer (see Section 10)

To exercise any of these rights, email us at support@resume2recruit.com. We will respond within 30 days.

6. Data Retention

Account and resume data — retained until you delete your account.
Deleted accounts — personal data is purged from active systems within 30 days; encrypted backups expire within 90 days.
Payment records — retained for 7 years as required by Indian tax law.
Anonymized analytics — may be retained indefinitely in aggregate form.

7. Security

All traffic is encrypted in transit via TLS 1.2+ (HTTPS).
Passwords are hashed with bcrypt (never stored in plain text).
Database connections are encrypted and access-controlled.
Session tokens (JWT) are short-lived and rotated.
We follow the principle of least privilege for internal access.

No online service can guarantee absolute security. If a breach affects your personal data, we will notify you and the appropriate authorities within 72 hours of discovery, as required by the DPDP Act.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, email support@resume2recruit.com and we will delete it.

9. International Transfers

Some of our processors (Anthropic, Render, Vercel, Resend) are based outside India. By using the Service, you consent to the transfer of your data to those jurisdictions, which may have data-protection laws different from your own. We use providers with industry-standard safeguards (SOC 2, ISO 27001, or equivalent).

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and IT (Intermediary Guidelines) Rules, 2021, all privacy, data, and grievance complaints can be addressed to our Grievance Officer at support@resume2recruit.com. We respond to grievances within 15 days, as required under the IT Rules. Jurisdiction: Telangana, India.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email at least 30 days before the changes take effect, and update the "Effective date" at the top of this page. Continued use after the effective date constitutes acceptance of the revised policy.

12. Contact Us

For any question about this Privacy Policy, your data, or to exercise your rights, reach us at: support@resume2recruit.com

Privacy Policy