1. Introduction
Resume.hr ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume hosting service.
By using Resume.hr, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
2. Information We Collect
2.1 Personal Information
We collect information that you provide directly to us, including:
- Account Information: Name, email address, password, country
- Resume Content: Professional information, work history, education, skills, and any other content you include in your resume
- Profile Information: Profile photos, video introductions, and other optional profile enhancements
- Payment Information: Processed securely through Stripe (we do not store credit card details)
- Custom Domain Information: Domain names and DNS configuration (for Pro users)
2.2 Automatically Collected Information
When you access our Service, we automatically collect:
- Usage Data: IP address, browser type, operating system, pages visited, time spent on pages
- Analytics Data: Resume view counts, visitor locations (country level), referral sources
- Device Information: Device identifiers, mobile network information
- Cookies and Tracking: Session cookies, preference cookies, analytics cookies
2.3 File Uploads
Resume PDFs and images are stored securely using Uploadcare, a third-party file hosting service. These files are encrypted and access-controlled according to your privacy settings.
3. How We Use Your Information
We use the collected information for:
- Service Provision: Creating and hosting your resume, managing your account
- Communication: Sending account notifications, updates, and support responses
- Analytics: Providing you with resume view statistics and visitor insights
- Payment Processing: Managing subscriptions and billing
- Service Improvement: Analyzing usage patterns to enhance features and user experience
- Security: Detecting and preventing fraud, abuse, and security incidents
- Legal Compliance: Complying with applicable laws and regulations
- Custom Domains: Configuring and verifying custom domain connections
4. How We Share Your Information
4.1 Public Resumes
When you publish a resume, the information you include becomes publicly accessible via your unique resume URL or custom domain. You control what information to include and can set privacy options such as password protection.
4.2 Service Providers
We share information with trusted third-party service providers:
- Uploadcare: Secure file storage and CDN for resume files and images
- Stripe: Payment processing for subscriptions
- Laravel Forge: Server management and hosting infrastructure
- Email Service Providers: Transactional emails and notifications
4.3 Legal Requirements
We may disclose your information if required by law, legal process, or government request, or to protect our rights, property, or safety.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time through your account settings.
After account deletion:
- Personal data is permanently deleted within 30 days
- Backup copies may persist for up to 90 days
- Aggregated, anonymized data may be retained for analytics
- Legal and financial records are retained as required by law
6. Your Privacy Rights
You have the following rights regarding your personal information:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Portability: Export your resume data in a portable format
- Objection: Object to certain processing activities
- Restriction: Request restriction of data processing
- Withdraw Consent: Withdraw previously given consent
To exercise these rights, please contact us through our contact page.
7. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Secure password hashing using bcrypt
- Regular security audits and updates
- Access controls and authentication
- Secure file storage with Uploadcare
- Regular backups and disaster recovery procedures
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Essential Cookies: Required for authentication and service functionality
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Understand how you use our Service
You can control cookies through your browser settings. Note that disabling cookies may affect service functionality.
9. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
10. Children's Privacy
Resume.hr is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers.
12. California Privacy Rights
California residents have additional rights under the CCPA:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to access personal information
- Right to equal service and price
Note: We do not sell personal information to third parties.
13. GDPR Compliance
For users in the European Economic Area (EEA), we comply with GDPR requirements:
- Lawful basis for processing: Consent, contract performance, legitimate interests
- Data minimization: We collect only necessary information
- Right to lodge a complaint with supervisory authority
- Data Protection Officer contact available upon request
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last Updated" date at the top indicates when this policy was last revised.
Your continued use of Resume.hr after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Through our contact page
- Via your account settings for data requests
We will respond to all requests within 30 days.