Privacy Policy

Last updated: 2025-04-29

1. Introduction
Resumevana.com ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your data under GDPR and relevant privacy laws.

2. What We Collect
2.1. Personal Data
We collect and process:

Email address (for account creation, communication, and resume delivery)

Hashed password (for authentication security)

Role (e.g., user, admin)

Timestamps (e.g., account creation, last update)

Consent flags (acceptance of Terms of Service, Privacy Policy, marketing preferences)

Resume files (uploaded for processing, temporarily stored)

2.2. Automatically Collected Data
IP address

Browser type and version

Usage logs

Session cookies

We do not use advertising cookies or external analytics tracking.

3. Legal Basis for Processing
We process data under:

Contractual necessity (Art. 6(1)(b) GDPR): For account management and providing services.

Legitimate interest (Art. 6(1)(f) GDPR): Service stability, security, and fraud prevention.

Consent (Art. 6(1)(a) GDPR): For optional communications (e.g., marketing emails).

Third-party processors are bound by GDPR-compliant contracts under Article 28 GDPR.

4. How We Use Your Data
Your data is used to:

Create and manage your account

Authenticate your login

Process and deliver formatted resumes

Maintain platform security

Communicate regarding service updates (and marketing if consented)

We do not sell your data or share it with advertisers.

5. Data Security
Passwords are stored hashed using industry best practices (e.g., bcrypt or equivalent).

Data in transit is protected via HTTPS.

Resume files are processed in plaintext and deleted after processing.

No system is 100% secure. You acknowledge and accept residual security risks when using the service.

6. Infrastructure and Third-Party Services
We transmit resume content to:

Groq (AI-based language processing)

Google Cloud Vision API (OCR for text extraction when necessary)

Cloudflare (TLS encryption, security, content delivery)

Hetzner (Hosting provider in the European Union)

These processors operate under strict data protection agreements.

7. Your Rights (GDPR)
You have the right to:

Access your personal data

Correct inaccurate data

Request deletion of your account and personal data

Restrict or object to certain types of processing

Request a machine-readable copy of your data

Withdraw consent where given

You can exercise these rights by contacting us.

8. Data Retention
Resume files are deleted shortly after processing (usually within minutes).

Account data (email, hashed password, role, timestamps, consents) is retained until you delete your account or request erasure.

System backups may retain metadata for up to 90 days.

9. Liability for Uploaded Content
You are responsible for:

The legality of resume content you upload

Avoiding unnecessary submission of sensitive data (e.g., national IDs, bank details)

Keeping your account credentials safe

10. Child Protection
Resumevana.com is not intended for users under the age of 16. If a user under this age is detected, all related data will be deleted immediately.