Privacy Policy

1. Overview

This Privacy Policy describes how AIResumeCraft (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit or use our website www.airesumecraft.com (“Site”) and the resume and cover letter services we provide (“Service”).

By using our Site or Service, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our Site or Service.

2. Information We Collect

We collect the following types of information to provide our Service and improve user experience:

• Personal Information: When you sign up or use our platform, we may collect your name, email address, account password, and billing details (if applicable).
• Resume Content: Information you provide for generating your resume or cover letter, such as employment history, education, skills, achievements, job preferences, and any content you upload.
• Usage Data: We collect data about how you interact with our platform, including page visits, AI generation frequency, features used, and system logs.
• Device and Technical Data: Information such as IP address, browser type, device type, operating system, and approximate location.
• Cookies and Similar Technologies: We use cookies and tracking scripts to help personalize your experience, remember your preferences, and analyze performance. See Section 9 for details.

We do not knowingly collect sensitive personal information (e.g., health data, biometric data) unless voluntarily submitted through resume content.

3. How We Use Your Information

Your information is used for the following purposes:

• To provide the Service: Including generating resumes/cover letters using AI, saving drafts, and offering template designs and content suggestions.
• To personalize user experience: Tailoring content, remembering your preferences, and improving our AI generation outputs based on your inputs.
• To communicate with you: Sending transactional emails (e.g., confirmations, updates, password resets) and, if opted-in, occasional promotional communications.
• To monitor and improve the Service: Analyzing platform usage to fix bugs, develop new features, and optimize performance.
• To enforce our Terms: Preventing abuse, investigating violations, and protecting the security and integrity of our platform.
• To comply with legal obligations: As required by law, including responding to legal requests or government investigations.

We will never sell your personal information to third parties.

4. Disclosure of Information

We do not sell, rent, or trade your personal information. We may share your data with third parties only in the following circumstances:

• Service Providers: We use third-party vendors to assist in operating the Service, including hosting (Vercel, Render), database (MongoDB), cloud protection (Cloudflare), email services, and AI APIs (such as OpenAI). These vendors are contractually obligated to keep your information secure and use it only to support our services.
• Legal Requirements: We may disclose your information when required by law or in response to valid legal requests, such as subpoenas, court orders, or to comply with Australian regulatory obligations.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We limit data sharing to the minimum necessary to fulfill the stated purpose, and we use secure transfer methods.

5. Your Rights & Choices

As a user, especially under Australian privacy principles, you have the following rights:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can ask us to update or correct any inaccurate or incomplete information.
• Deletion: You can request deletion of your account and associated data (unless we’re legally required to retain it).
• Withdraw Consent: If you previously gave consent to data processing (such as marketing), you can withdraw it anytime.
• Complaint: You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy rights have been breached.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe, typically within 30 days.

6. Data Security

We take reasonable steps to protect your information from unauthorized access, use, loss, or disclosure. Security measures include:

• SSL/TLS encryption for data transmission
• Secure data storage using MongoDB with access controls
• Role-based access for team members
• Cloudflare protection against malicious traffic
• Routine monitoring and patching of infrastructure

Despite our efforts, no method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. This generally means:

• While your account is active
• As required to fulfill legal obligations (e.g., taxation or financial reporting)
• For backup, fraud prevention, or dispute resolution

If you request deletion of your account, we will securely delete your personal information, unless retention is required by law.

8. International Data Transfers

We may store or process your information in countries outside of Australia, such as the United States, Europe, or other jurisdictions where our third-party service providers operate (including OpenAI, Stripe, MongoDB, Vercel, and Render).

Where data is transferred outside Australia, we take reasonable steps to ensure that the recipient handles your information in accordance with applicable Australian privacy laws and offers protections substantially similar to the Australian Privacy Principles.

By using our Service, you consent to the transfer of your personal information to international locations as required to provide the Service.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, including for:

• Session management
• User preferences
• Traffic analysis and performance (e.g., Google Analytics)

You can control cookie settings through your browser. However, disabling cookies may impact your experience or the functionality of some features.

We do not use cookies for third-party advertising or tracking across unrelated sites.

10. Children’s Privacy

AIResumeCraft is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to delete the information as soon as possible.

If you believe a child under 16 has provided us with personal information, please contact us immediately at [email protected].

11. Third-Party Links and Services

Our Service may contain links to or integrations with third-party services, such as payment providers (e.g., Stripe), external job platforms, or AI tools (e.g., OpenAI). These third-party services are governed by their own privacy policies and terms of use.

We are not responsible for the privacy practices or content of third-party sites or services. We encourage you to review the privacy policies of any third-party service you access through our platform.

12. Your Consent and Updates to This Policy

By using AIResumeCraft, you consent to the collection, use, and disclosure of your personal data as outlined in this Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make material changes, we will notify you by email (if you’ve provided one) or via a notice on our website. The “Last Updated” date at the top of the page indicates when this Policy was last revised.

We encourage you to review this Policy periodically to stay informed about how we are protecting your data.

13. Contact Information

If you have questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us at:

AIResumeCraft Privacy Officer
Email: [email protected]

If you are dissatisfied with our handling of your personal information, you may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au