Privacy Policy

Last updated: April 2025

1. Who We Are

Resumégpt is operated by Resumégpt, based in Turku, Finland. We are the data controller for personal information collected through this website and application. Questions? Contact us at support@resumegpt.info

2. What Information We Collect

Account information. When you create an account, we collect your name and email address. If you sign in with Google or LinkedIn, we receive your name and email from those providers.

Profile and career data. To generate your documents, you voluntarily provide professional information including work experience, job titles, education history, skills, and career summaries.

Job descriptions. You paste job postings into our platform. We process this content solely to generate your tailored CV and cover letter.

Generated documents. We store the CVs and cover letters we produce for you so you can access and download them.

Payment information. Payments are handled entirely by Stripe. We do not store your card number, CVV, or full payment details. We receive only a subscription status and transaction reference from Stripe.

Usage data. We collect data on how you use the service — features used, number of applications generated, and session data.

Technical data. We automatically collect your IP address, browser type, operating system, and device type when you visit our site.

3. How We Use Your Information

PurposeLegal Basis (GDPR)
Generating your CV and cover letterContract performance
Processing payments and subscriptionsContract performance
Communicating about your accountContract performance
Improving the product and fixing bugsLegitimate interest
Sending product tips (opt-out available)Legitimate interest / consent
Fraud prevention and securityLegitimate interest

We do not sell your personal data. We do not use your career data to train AI models.

4. AI Processing — How Your Data Is Used with Claude

Our service uses the Claude API, operated by Anthropic, Inc. (USA), to generate your documents. When you submit a job description and your profile, that information is sent to Anthropic's API servers for processing. Anthropic does not use API-submitted data to train their models. You can review Anthropic's privacy practices at anthropic.com/privacy.

5. Third-Party Services

ServicePurposeData Shared
StripePayment processingName, email, subscription status
Anthropic (Claude API)AI document generationProfile data, job descriptions
Google OAuthSign-inName, email (from Google)
LinkedIn OAuthSign-inName, email (from LinkedIn)

We do not share your data with advertisers, data brokers, or any third parties for marketing purposes.

6. International Data Transfers

We are based in Finland (EU/EEA). Some third-party providers — including Anthropic and Stripe (both USA) — are located outside the EU. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

Data typeRetention period
Account and profile dataUntil you delete your account
Generated documentsUntil you delete your account
Payment records7 years (legal/tax obligation)
Usage logs12 months rolling
Technical/IP logs90 days

When you delete your account, we permanently delete your profile, career data, and generated documents within 30 days.

8. Your Rights Under GDPR

To exercise these rights, email support@resumegpt.info. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

9. Cookies

TypePurposeDuration
EssentialKeep you signed in, maintain session stateSession / 30 days
FunctionalRemember your preferences and settings12 months

We do not use advertising or tracking cookies.

10. Data Security

We implement HTTPS encryption on all data in transit, encrypted password storage (bcrypt), and access controls limiting production data access to authorised team members. In the event of a data breach, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

11. Children

Our service is not directed at anyone under the age of 16. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will notify you by email or by displaying a notice in the application.

13. Contact

Resumégpt
Kuohukuja, 20540, Turku, Finland
Email: support@resumegpt.info