Privacy Policy

This policy explains how CraftRezume ("we", "us") handles your information when you use craftrezume.in (the "Service"). We collect only what we need to run the Service, we never sell your data, and your resumes are visible only to you.

Information we collect

• Account details: your name and email address. If you sign in with Google, we receive your name and email from Google; we never see your Google password.
• Resume content: everything you type into the builder or that we extract from a resume you upload - for example work history, education, skills and contact details - plus any job descriptions you paste.
• Uploaded files: when you upload a PDF or Word file, we extract its text and layout signals to analyse it. The file itself is not stored.
• Billing status: your plan, renewal date and the customer and subscription IDs from our payment provider. We never receive or store your card or bank details.
• Usage and security data: monthly feature counters (such as AI actions used), short-lived rate-limit counters keyed by a one-way hash, and standard server logs (such as time, page requested and error details) kept to run and protect the Service.

How we use it

• To create your account, keep you signed in and provide the resume builder, ATS analysis, AI features and PDF downloads.
• To process subscriptions and enforce plan limits.
• To prevent abuse, fraud and security incidents, and to fix problems.
• To reply when you contact us, and to send essential account emails such as password resets.

We do not use your resume content for advertising, and we do not sell or rent personal data to anyone.

Service providers we share data with

• Google Cloud and Firebase host the Service, store your account and resumes, and handle sign-in (Firebase Authentication).
• Google (Gemini API) processes resume text only when you use an AI feature - such as rewriting bullets, generating a summary, tailoring to a job or analysing an upload - to return the result to you.
• Polar (polar.sh) is our merchant of record. It processes payments, taxes, invoices and refunds for Pro subscriptions under its own privacy policy.

We may also disclose information if required by law, or to protect the rights, safety and security of our users and the Service.

Cookies

We use one essential cookie to keep you signed in. It is secure, cannot be read by scripts, and expires after 14 days or when you log out. We do not use advertising or third-party tracking cookies.

Storage, security and retention

Data is stored on Google Cloud infrastructure and encrypted in transit and at rest. Access to your resumes is restricted to your account on our servers. We keep your account and resumes until you delete them or ask us to delete your account. Rate-limit counters are deleted automatically, and logs are kept only as long as needed for security and troubleshooting. Our providers may process data in data centres outside India.

Your choices and rights

• You can edit or delete any resume or version at any time from your dashboard.
• You can ask for a copy of your data, a correction, or deletion of your account by emailing us from the address on your account.
• You can cancel a Pro subscription at any time from the billing page.

We respond to requests within 30 days, in line with applicable law, including India's Digital Personal Data Protection Act, 2023.

Children

The Service is meant for job seekers aged 16 and over. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

If we make significant changes, we will update the date above and, where appropriate, notify you by email or in the app.

Contact

For privacy questions or requests, email existedinnovationshelp@gmail.com.