Your privacy matters

1. Information We Collect

1.1 Resume Content

When you upload a PDF resume for analysis, we extract the text content and send it to our AI inference provider (Groq Cloud) to generate your ATS score, keyword analysis, and improvement suggestions.

What we do with it: Process it for analysis, then discard it. We do not store your resume content in our database.

What we don't do: We don't sell your resume. We don't use it to train AI models. We don't share it with recruiters or employers.

1.2 Analysis Results

Your ATS score, section scores, keyword gaps, and AI suggestions are stored locally in your browser using localStorage. This allows you to view your analysis history without creating an account.

If you create an account (optional), we store your analysis history on our servers so you can access it from any device.

1.3 Account Information (Optional)

If you sign up for an account, we collect:

• Email address
• Password (hashed and salted using bcrypt)
• Account creation date

1.4 Automatically Collected Data

We collect minimal technical data for security and debugging:

• IP address (for rate limiting and abuse prevention)
• Browser type and version
• Timestamp of requests
• Error logs (which do not include resume content)

2. How We Use Your Information

We use the information we collect to:

• Provide the service: Analyze your resume and generate results
• Improve the product: Track aggregate usage patterns (e.g., how many analyses per day) to optimize performance
• Prevent abuse: Rate limiting, spam detection, and fraud prevention
• Communicate: Send you analysis results via email if you explicitly request it

3. Third-Party Services

3.1 Groq Cloud (AI Inference)

We use Groq's API to run the Llama 3.3 70B model for resume analysis. Your resume text is sent to Groq for processing.

Groq's data policy: According to Groq's terms, prompts sent to their API are not used to train or improve their models and are not retained after processing (unless you explicitly opt-in to data sharing, which ResuPulse does not do).

Learn more: Groq Privacy Policy

3.2 MongoDB Atlas (Database)

We use MongoDB Atlas to store account information and analysis metadata (score, keywords, timestamps). Your resume content is not stored in the database.

3.3 Vercel (Hosting)

Our application is hosted on Vercel. Standard server logs (IP address, request path, timestamp) are collected by Vercel for infrastructure purposes.

4. Cookies and Tracking

We use the following types of cookies:

• Essential cookies: Session authentication token (if logged in), localStorage for analysis history
• Analytics cookies (optional): We may use privacy-focused analytics (e.g., Plausible) to understand traffic patterns. No personally identifiable information is collected.

What we don't use: Google Analytics, Facebook Pixel, or any third-party ad tracking.

5. Data Retention

• Resume content: Discarded immediately after analysis
• Analysis results: Stored in your browser's localStorage indefinitely (you can clear it anytime)
• Account data: Retained until you request account deletion
• Server logs: Retained for 30 days for debugging and security

6. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of all data we have about you
• Correction: Request corrections to inaccurate data
• Deletion: Request deletion of your account and all associated data
• Portability: Export your analysis history in JSON format
• Opt-out: Disable analytics cookies (if implemented)

To exercise these rights, email us at: privacy@resupulse.app

7. Data Security

We implement industry-standard security measures:

• HTTPS encryption for all data in transit
• Bcrypt password hashing with salts
• Rate limiting to prevent abuse
• Regular security audits and dependency updates

However, no system is 100% secure. If you discover a security vulnerability, please report it to: security@resupulse.app

8. Children's Privacy

ResuPulse is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. International Users

Our servers are located in the United States. If you access ResuPulse from outside the U.S., your data will be transferred to and processed in the U.S., where data protection laws may differ from your country. By using ResuPulse, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will notify users via email (if you have an account) or a banner on the website.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, reach out:

• Email: privacy@resupulse.app
• Support: support@resupulse.app