Privacy Policy
Your career data is sensitive. This policy explains exactly what we collect, how we use it, and the measures we take to keep it secure.
Last updated: July 29, 2026 · Applies to all users of resumekraft.in
End-to-End Encryption
Supabase RLS Protected
Razorpay PCI-DSS L1
Right to Deletion
1. Information We Collect
ResumeKraft collects only the minimum information necessary to provide our AI resume building services:
Account Information
- • Email address (via Google OAuth or email signup)
- • Display name (optional, user-provided)
- • Account creation timestamp and last login date
Resume & Career Data
- • Resume content you type, paste, or upload (work history, education, skills)
- • Target job descriptions provided for AI tailoring
- • Template selections and formatting preferences
Usage & Analytics
- • Anonymous page views and feature usage (via Vercel Analytics & Google Analytics)
- • Browser type, device category, and approximate geographic region
- • Subscription tier and usage counts (downloads, AI credits)
2. How We Use Your Information
Your data is strictly used for the following purposes and nothing else:
AI Resume Optimization
Processing your resume content via Google Gemini AI to generate tailored, ATS-optimized versions
Document Generation
Formatting and exporting your resume as professional PDF and DOCX files
Subscription Management
Managing plan tiers, tracking usage limits, and processing billing via Razorpay
Service Improvement
Analyzing aggregate, anonymized usage patterns to improve templates and AI quality
3. Data Security & AI Confidentiality
We prioritize the privacy of your career data with enterprise-grade security measures:
- Database Encryption: All resume data is stored in encrypted Supabase PostgreSQL tables with strict Row-Level Security (RLS) policies — ensuring only you can access your data
- HTTPS Everywhere: All data transmitted between your browser and our servers is encrypted via TLS 1.3
- AI Processing Isolation: Resume content sent to Google Gemini API is processed in real-time and is not stored, cached, or used for training Google's models
- No Data Selling: We never sell, rent, or share your personal information with third-party recruiters, job boards, or data brokers
4. Third-Party Services
ResumeKraft integrates with trusted, industry-standard third-party providers. Each operates under strict data protection standards:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Auth & Database | Email, resume data (encrypted) |
| Google Gemini AI | AI Resume Processing | Resume text (real-time, not stored) |
| Razorpay | Payment Processing | Email, payment details (PCI-DSS L1) |
| Vercel | Hosting & Analytics | Anonymous page views, performance |
| Google Analytics | Usage Analytics | Anonymous events, device info |
5. Your Data Rights
You have full control over your personal data on ResumeKraft:
Right to Access
Request a copy of all personal data we store about you
Right to Correction
Update or correct inaccurate personal information at any time
Right to Deletion
Request permanent deletion of your account and all associated data
Right to Portability
Export your resumes in PDF/DOCX format at any time from your dashboard
To exercise any of these rights, email support@resumekraft.in. We respond to all data requests within 7 business days.
6. Cookies & Local Storage
ResumeKraft uses minimal cookies and browser storage strictly for functionality:
- •Authentication cookies: Managed by Supabase to maintain your login session
- •Local storage: Used to save guest resume drafts before account creation
- •Analytics cookies: Google Analytics and Vercel Analytics cookies for anonymous usage tracking
We do not use advertising cookies, tracking pixels, or retargeting tools of any kind.
Privacy FAQs
Does ResumeKraft sell my resume data to recruiters?
No. We never sell, rent, or share your resume content with third-party recruiters, job boards, or data brokers. Your career data stays strictly within your account.
How is my data processed by AI?
When you use AI features, your resume content is sent to Google Gemini API for processing. This data is transmitted securely via HTTPS, processed in real-time, and is not stored by Google for model training purposes.
Can I delete my account and all associated data?
Yes. You can request complete account deletion by emailing support@resumekraft.in. We will permanently remove your account, resumes, and all personal data from our Supabase database within 7 business days.
Does ResumeKraft store my credit card or UPI details?
No. All payment processing is handled by Razorpay, a PCI-DSS Level 1 certified payment gateway. ResumeKraft never has access to or stores your card numbers, CVV, UPI PIN, or bank credentials.
Data privacy concerns?
If you have questions about this policy or want to exercise your data rights, we're here to help.
Contact Privacy Team