1. Introduction

This Privacy Policy explains how Resume Tailor ("we", "us", or "our") collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable European data protection laws when you use our SaaS platform.

2. Data Controller & Contact

• Resume Tailor is the data controller for your personal data.
• For any privacy-related questions or to contact our Data Protection Officer (DPO), email: hello@proresume.se

3. Data Collection

• Information you provide: name, email, profile picture, resume content, job descriptions, and payment information (processed by Stripe).
• Usage data: analytics, device information, and cookies.
• We do not collect sensitive categories of data unless explicitly provided by you in your resume or profile.

4. Legal Bases for Processing

• Contract: To provide and manage your account and services.
• Consent: For optional features, marketing, and cookies (where required).
• Legal obligation: To comply with applicable laws.
• Legitimate interest: To improve our services, prevent fraud, and ensure security.

5. Data Usage

• To provide, maintain, and improve the Service.
• To analyze your resume and job descriptions for tailored suggestions (AI features).
• To send important notifications related to your account or subscription.
• To improve user experience and develop new features. Your personal data will not be used for training large language models (LLMs).
• Aggregated and anonymized data may be used for analytics and service improvement.

6. Third-Party Services & International Transfers

• AI features are powered by Gemini via OpenRouter; your data may be processed by these services in the EEA or outside the EEA with appropriate safeguards (e.g., Standard Contractual Clauses).
• Files are stored securely on AWS S3 (EU region where possible).
• Payments are processed by Stripe; we do not store your full payment details.
• We ensure that any international transfers of your data are protected by adequate safeguards as required by GDPR.

7. Cookies and Tracking

• We use cookies and similar technologies to enhance your experience and analyze usage. Where required, we obtain your consent.
• You can control cookie preferences in your browser settings.

8. Data Retention

• We retain your personal data only as long as necessary for the purposes described above or as required by law.
• Upon account deletion or request, your data will be erased or anonymized unless retention is required by law.

9. User Rights (GDPR)

• Right to access your data
• Right to rectification (correction)
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time (where processing is based on consent)
• Right to lodge a complaint with a supervisory authority in the EU

To exercise your rights, please contact us at hello@proresume.se.

10. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

11. Data Security

• We use industry-standard security measures to protect your data, but cannot guarantee absolute security.
• Access to your data is restricted to authorized personnel only.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Continued use of the Service constitutes acceptance of the revised policy. We will notify you of material changes as required by law.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact our DPO at hello@proresume.se.