Privacy Policy

Last updated: October 12, 2026

This policy explains what personal data ResumeIQ collects, why, who we share it with and the rights you have.

1. Who is responsible for your data

ResumeIQ is operated by Usman Raza, Rawalpindi, Punjab, Pakistan. Usman Raza is the data controller for the personal data described in this policy. For any privacy question or request, email iamosmanraza@gmail.com.

2. Data we collect and why

• Account data (email address, display name, password stored in hashed form by our authentication provider). Used to create and secure your account and contact you about it. Legal basis: performance of our contract with you.
• Resumes and job information (the files you upload, the text extracted from them, and any target role or job description you enter). Your resume can contain personal details such as your contact information, work history and education. Used only to produce your analysis and show you your history. Legal basis: performance of our contract with you.
• Analysis results (scores and suggestions generated for you). Used to show you your results and history. Legal basis: performance of our contract with you.
• Subscription data (your plan, subscription status and Paddle customer and subscription IDs). We do not receive or store your card details. Used to apply your plan limits and manage billing. Legal basis: performance of our contract and legal obligations.
• Technical data (IP address, browser type, server logs). Used to run the Service securely and fix problems. Legal basis: our legitimate interest in operating a secure and reliable service.

We do not sell your personal data, and we do not use your resumes to train AI models.

3. Who we share data with

We share personal data only with the following, and only as needed to run the Service:

• Paddle.com: our reseller and Merchant of Record, which processes payments, taxes, invoices and refunds. Paddle collects your payment details directly and handles them under its own privacy policy.
• Supabase: database, file storage and account authentication.
• Vercel: website and application hosting.
• Google (Gemini API): AI processing. The text of your resume and any job details you enter are sent to Google's Gemini API to generate your analysis.
• Google AdSense: advertising. Google and its partners use cookies and similar technologies to show ads, which may be personalised based on your visits to this and other websites. Google receives technical data such as your IP address and browser information, but not your resume or analysis results. See how Google uses information from sites that use its services.
• Professional advisers (such as accountants or lawyers) where needed, and authorities where we are required to by law.

4. International transfers

Our service providers may process data in countries outside your own, including the United States and the European Union. Where required, we rely on safeguards such as the providers' Standard Contractual Clauses to protect your data.

5. How long we keep data

• Account data, resumes and analysis results are kept while your account is active.
• You can delete any analysis, or your whole account, at any time from the app, and deletion is immediate. Deleting an analysis removes the resume file, its text and the results; we keep only a record that an analysis was run and when, with no resume content, so plan usage limits still apply. Deleting your account removes everything, including those records. You can also email us to request deletion, and we will act on it within 30 days.
• Billing and transaction records are kept as long as tax and accounting laws require.
• Server logs are kept for a limited period for security and troubleshooting.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw consent where we rely on it. To make a request, email iamosmanraza@gmail.com. We respond within one month. If you are unhappy with how we handle your data, you can also complain to your local data protection authority.

7. Security

We protect your data with industry-standard measures, including encrypted connections (HTTPS), access controls that limit each user to their own data, and reputable infrastructure providers. No online service can be completely secure, but we work to protect your information and will notify you of a breach where the law requires.

8. Cookies

We use essential cookies to keep you signed in. We also show ads through Google AdSense, which uses advertising cookies to serve and measure ads and, where you allow it, to personalise them. Where the law requires it (in the EEA, the UK and Switzerland), we ask for your consent first using Google's consent tool, and you can change your choice at any time with the "Privacy settings" link at the bottom of every page. You can also opt out of personalised ads at Google Ads Settings. During checkout, Paddle may set its own cookies, which are needed to process your payment.

9. Children

The Service is not intended for anyone under 16, and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy from time to time. We'll change the "Last updated" date above and, for significant changes, tell you by email or in the app.

11. Contact

Usman Raza (ResumeIQ), Rawalpindi, Punjab, Pakistan.
Email: iamosmanraza@gmail.com