ResumeOGResumeOG

Privacy Policy

Last updated: March 29, 2026

1. Introduction

ResumeOG ("we," "us," or "our") operates an AI-powered resume building platform at resumeog.com (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

By using ResumeOG, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Service. This policy should be read alongside our Cookie Policy.

2. Information We Collect

Personal Information You Provide

When you use our Service, you may provide:

  • Account information (name, email address, phone number)
  • Professional details (work experience, education, skills, certifications)
  • Job application data (job descriptions, cover letters, application notes)
  • Uploaded files (resume documents, job posting screenshots)

Automatically Collected Information

We automatically collect certain information when you use the Service, including:

  • Authentication and session data
  • Browser type and basic device information necessary for functionality
  • Cookie data as described in our Cookie Policy

2A. OAuth Authentication (Google & Microsoft)

ResumeOG offers the option to sign in using Google Sign-In or Microsoft authentication. When you choose to sign in with these services, we request access to limited information from your Google or Microsoft account.

Information Accessed via OAuth

When you sign in with Google or Microsoft, we access:

  • Email address: To create and identify your account
  • Name: To personalize your experience
  • Profile picture: To display in your account (optional)

Limited Use Disclosure

ResumeOG's use and transfer of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.

We use your Google account information onlyfor authentication and account creation purposes. We do not access, use, store, or share any other data from your Google account, including Gmail, Google Drive, Calendar, or Contacts. Your Google login credentials are handled securely by Google's OAuth service and are never stored on our servers.

Revoking OAuth Access

You can revoke ResumeOG's access to your Google or Microsoft account at any time through your respective account settings:

Revoking access will prevent you from signing in via OAuth, but you can continue accessing your ResumeOG account using email/password authentication if you have set a password.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Create, edit, and manage your resumes and cover letters
  • Provide AI-powered resume optimization, job analysis, and content generation
  • Process your subscription and manage your account
  • Communicate with you about service-related matters
  • Improve the Service and develop new features
  • Detect, prevent, and address security issues

We do not sell your personal information to third parties. We do not share your resume or application data with employers unless you explicitly choose to do so.

4. AI Data Processing

Our Service uses third-party AI service providers to power AI features such as resume parsing, job description analysis, resume optimization, cover letter generation, and application scoring.

When you use AI-powered features, relevant data (such as resume content and job descriptions) is sent to our AI service provider for processing. We apply data minimization principles and only send the information necessary for each specific operation. Our AI provider processes this data in accordance with their privacy policies and terms of service.

Key points about our AI data processing:

  • Your data is not used to train AI models
  • AI-processed data may be temporarily retained by our provider for abuse monitoring (up to 30 days), after which it is deleted
  • All AI-generated content is presented for your review and approval before use
  • Use of AI features is optional — you can build resumes manually

Uploaded files (PDF, DOCX, images) are processed in-memory on our servers to extract text content. Original files are not permanently stored.

5. Data Storage & Retention

Your data is stored on secure servers operated by our hosting and database providers. We implement industry-standard security measures including encryption at rest and in transit.

What We Store

  • Account information and authentication credentials
  • Resume data (personal details, work experience, education, skills)
  • Application tracking data and generated documents
  • Subscription and billing information
  • User preferences and settings

Retention Periods

  • Account data: Retained while your account is active and for a reasonable period thereafter, or until you request deletion
  • AI processing data: Temporarily retained by our AI provider (up to 30 days) for abuse monitoring
  • Server logs: Retained for up to 90 days for security and operational purposes
  • Billing records: Retained as required by applicable tax and financial regulations

Data Deletion

You can delete your data at any time through your account settings or by contacting us at our contact page. Upon account deletion, your personal data will be removed from our active systems within 30 days, except where retention is required by law.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (TLS/HTTPS) and at rest
  • Secure authentication and access controls
  • Regular security monitoring and incident response procedures

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

Human Access to Data

Access to your personal data by ResumeOG personnel is strictly limited and controlled. Our employees and contractors may only access your data when:

  • You explicitly request support or assistance that requires accessing your account
  • It is necessary for security purposes (e.g., investigating fraud, abuse, or security incidents)
  • Required by law or legal process (e.g., court orders, subpoenas)
  • Necessary for maintaining or improving the Service (performed on anonymized or aggregated data whenever possible)

All personnel with potential access to user data are bound by confidentiality obligations and trained on data protection practices.

7. Cookies & Advertising

We use cookies and similar technologies for authentication, functionality, analytics, and advertising purposes. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

Users on our free plan may see advertisements served by third-party advertising partners. If you consent to ad personalization cookies, ads may be tailored to your interests. If you decline, you may still see non-personalized (contextual) advertisements that are not based on your browsing history.

We honor Global Privacy Control (GPC) signals and Do Not Track preferences where applicable.

8. Third-Party Services

We use trusted third-party service providers to operate the Service. These providers may process your data on our behalf in the following categories:

  • AI services: For resume parsing, content generation, and job analysis
  • Authentication services: For secure user authentication, database hosting, and account management
  • Cloud infrastructure: For application hosting and content delivery
  • Email services: For transactional email delivery (welcome emails, notifications)
  • OAuth providers: For third-party sign-in services (when you choose to use social login)
  • Payment processing: For handling subscription payments securely
  • Advertising partners: For serving advertisements to free plan users

Each provider is contractually obligated to handle your data in accordance with applicable data protection laws. We do not share more data than necessary for each provider to perform their function.

Our Service may contain links to external websites. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before providing personal information.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your personal data
  • Portability: Export your data in a standard format
  • Restriction: Request that we limit processing of your data
  • Objection: Object to certain types of processing
  • Withdraw consent: Withdraw previously given consent at any time

To exercise any of these rights, contact us through our contact page. We will respond to verified requests within 30 days (or as required by applicable law).

10. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide additional rights, including:

  • The right to know what personal information is collected, used, and shared
  • The right to delete personal information
  • The right to opt out of the sale or sharing of personal information
  • The right to non-discrimination for exercising your privacy rights

We do not sell your personal information. For advertising-related data sharing, you can manage your preferences through our cookie consent settings or by contacting us.

11. European Users & GDPR

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) applies to our processing of your data.

Legal Basis for Processing

  • Contractual necessity: To provide the Service you requested
  • Legitimate interests: For security, fraud prevention, and service improvement
  • Consent: For cookies, analytics, and advertising (which you can withdraw at any time)

International Data Transfers

Your data may be transferred to and processed in countries outside the EEA. Where such transfers occur, they are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions approved by the European Commission.

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority. EU users can find their authority at edpb.europa.eu. UK users can contact the Information Commissioner's Office (ICO).

12. Children's Privacy

Our Service is not directed to children, and you may not use our Service if you are under the age of 18. If you are under 18, do not use our services, access the Service, or provide any information about yourself including, without limitation, your name, address, email address, or any screen name or user name you may use.

We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal data from a person under 18, we will delete that information promptly. If you believe someone under 18 has provided us with personal information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and provide prominent notice on our website. Your continued use of the Service after such changes constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: Contact Page