Privacy Policy

At Resumetricx, we collect information that helps us provide and improve our CV analytics platform:

• Account Information: Name, email address, and password when you create an account
• CV Content: Information you include in your resume (work experience, education, skills, etc.)
• Reading Data (from people who open your shared CV): when it was opened and for how long, seconds on each of ten named sections, the order those sections were read in, re-reads and scroll depth, which of your links were clicked, which application link was used, device type, browser name, operating system, the referring page, and the country the request came from. The IP address is used to derive the country and is then not stored — no city, no region, no coordinates. Browser version, screen size and language are dropped.
• Uploaded Documents: a CV you upload to share unchanged is stored as a file so it can be served to whoever holds the link. Readings of an uploaded file record only the open, the duration, the device type and the country — never which parts were read, because the file has no section markers in it.
• Reader-Supplied Identity: a name, and optionally a company, an email address and a short note, only where a reader has typed them into the optional card on a shared CV. Nothing is inferred, looked up or matched, the card is dismissible, and it is not shown at all to a reader who has objected to tracking.
• Usage Data: How you interact with our platform, features you use, and preferences
• Device Information (about you, in your own account): browser and operating system, and your IP address at the time of a request, for security and abuse prevention

The complete field-by-field inventory, in both directions, is on what we collect. If the two ever disagree, that page is the one kept in step with the code.

We use collected information to:

• Provide and maintain our CV analytics service
• Generate real-time recruiter engagement insights
• Improve and personalize your experience
• Send important service updates and notifications
• Provide customer support
• Protect against fraud and abuse
• Comply with legal obligations

We do not sell your personal information. We may share information only in these cases:

• When you share a CV: the document you share is shown to whoever holds the link. The reading it produces is processed on our legitimate interests in providing the measurement you asked for — not on consent — so the reader has the right to object at any time, and that control takes one click with no account. Global Privacy Control and Do Not Track are honoured automatically and cannot be overridden by us.
• Service Providers: six named processors — Firebase/Google Cloud, Stripe, SendGrid, IPinfo, Vercel and OpenAI — each listed with what it receives, where it is, and the transfer basis, on our subprocessors page.
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In case of merger, acquisition, or sale of assets

We implement industry-standard security measures to protect your data, including encryption, secure servers, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

You have the right to:

• Access and download your personal data (Art 15 and Art 20 — one JSON file, from your plan page or the consent page, without emailing anyone)
• Correct inaccurate information (Art 16)
• Request deletion of your account and data (Art 17)
• Object to processing (Art 21). This is the right that matters most here, and it belongs to anyone who opens a CV shared through this service as well as to you — because read tracking runs on legitimate interests rather than consent. Object here.
• Opt out of marketing communications
• Export your CV data in standard formats
• Lodge a complaint with a supervisory authority (Art 77). You may do this in the country where you live or work, and you do not have to raise it with us first.

We use cookies for the things an account needs — keeping you signed in, and remembering your preferences. We set no cookies at all on the device of someone who merely opens a CV you shared, and no third-party advertising or tracking pixels anywhere. You can control cookie preferences through your browser settings; if you are a reader rather than an account holder, the control you want is the one-click objection on the transparency page, and a Global Privacy Control or Do Not Track signal is honoured before you arrive.

We retain your information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your data within 30 days, except where required by law.

Separately, and whether or not you ever delete anything, reading data expires on a fixed schedule that runs automatically: raw view and interaction events are deleted after 90 days, per-document aggregates after two years, and billing records are kept for seven years because tax law requires it. §13 of the Terms states the same periods.

Resumetricx is not intended for users under 16 years old. We do not knowingly collect information from children.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our platform.

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@Resumetricx.com