Privacy Policy

Effective date: August 30, 2026
Last updated: September 17, 2026

Our commitment to you

• Your data is yours. We never sell your personal information. We never use it for advertising, and we never give it to employers, recruiters, or data brokers.
• Shared only to run the Service. Your information goes only to the service providers we need to operate ResumeRuler (for example secure hosting, AI analysis, and payment processing), under contracts that limit what they can do with it. They are all named in Section 5. Your resumes and job data are not used to train AI models.
• Protected by design. Encrypted connections, databases that isolate each user's data, private file storage, and payment details that go straight to Stripe or PayPal and never reach us.
• Based and built in the U.S.A. ResumeRuler is independently owned and based in San Diego, California.
• You stay in control. You can ask us to delete your account and your data at any time.

The rest of this policy gives the details.

ResumeRuler ("ResumeRuler," "we," "us," or "our") provides tools that help job seekers organize, evaluate, and prioritize job opportunities. This Privacy Policy explains what information we collect, how we use and disclose it, and the choices available to you when you use resumeruler.com and the ResumeRuler service (collectively, the "Service").

By using the Service, you acknowledge the practices described in this Privacy Policy. If you do not agree with this policy, do not use the Service.

1. Information we collect

Information you provide

We may collect:

• Account and profile information, such as your name, email address, an optional profile picture, preferred locations, time zone, account settings, and job preferences. If you add a passkey, we store the public credential and a device label for it; the private key never leaves your device.
• Purchase and balance information, such as the plans you buy, the amount, currency, and date, the payment provider and its reference for the transaction, any promotional code you redeem, refunds, and your job-workflow balance and usage. We do not receive or store your full payment-card number (see Section 14).
• Resume information, including uploaded resume files, filenames, extracted text, employment and education history, skills, accomplishments, certifications, and other information you choose to include in a resume.
• LinkedIn export information, when you choose to upload a LinkedIn ZIP, CSV, or XLSX export. Depending on the files included, this may contain connection names, employers, job titles, employment history, and limited interaction information associated with messages, endorsements, or recommendations.
• Job-search information, including job-posting URLs you submit, job descriptions you paste, application status, and your interactions with job reports. When the email-forwarding feature is offered, this also includes job-alert emails you forward to your private ResumeRuler forwarding address (see "Information from job sources and forwarded emails" below).
• Preferences and feedback, including your ranking preferences, corrections, support requests, beta-testing feedback, and other communications with us.

Please do not upload Social Security numbers, government identification numbers, financial-account information, medical information, or other information that is unnecessary for evaluating employment opportunities.

Information generated by the Service

We generate and store information needed to provide the Service, which may include:

• a structured candidate profile derived from your resumes;
• job requirements extracted from job descriptions;
• Candidate Fit, Preference, Connection, Total score, Best Fitting Resume, and ATS estimates;
• explanations, evidence mappings, and other derived job-matching information;
• job-ingestion, deduplication, freshness, workflow, usage, and cost records; and
• security, error, and operational records.

These outputs are estimates designed to assist your own job search. ResumeRuler does not make hiring decisions for employers and does not guarantee interviews, employment, applicant-tracking-system results, or any other outcome.

Information collected automatically

When you use the Service, we and our service providers may automatically process technical information such as your IP address, browser and device type, operating system, pages viewed, referring page, timestamps, request and error information, and security signals.

We currently use Vercel Web Analytics for aggregated information such as page views, referrers, approximate location, browser, operating system, and device type. Vercel Web Analytics is configured as a cookie-free analytics service and is not intended to identify or track a person across websites.

Information from job sources and forwarded emails

Forwarding job-alert emails and automatic job-board scans are not currently offered; today you add jobs yourself, by link or by pasting the description. The rest of this subsection describes email forwarding for accounts where it has been or will be enabled.

ResumeRuler receives only messages sent or forwarded to your assigned ResumeRuler address; it does not obtain general access to your email account. Forwarded messages may include sender and recipient addresses, subject lines, message identifiers, timestamps, and job-alert content.

When you submit or forward a link to a job posting, we may retrieve publicly available content from that page so we can identify, deduplicate, and score the opportunity. The third-party website may receive ordinary technical information associated with that request. If the page cannot be read, we may search the web for a readable copy of the same posting; that search contains only the job title, the company, and the city, never information about you.

2. How we use information

We use information to:

• create and administer your account;
• process purchases, promotional codes, and refunds, and keep your job-workflow balance;
• authenticate you, maintain secure sessions, and protect the Service;
• process resumes, LinkedIn exports, forwarded job alerts, and submitted job URLs;
• create your candidate profile and calculate job-related scores and explanations;
• identify duplicate job postings and maintain report freshness;
• generate in-app reports, Excel exports, and service emails;
• provide customer support and respond to requests;
• monitor reliability, troubleshoot errors, measure costs, and improve the Service;
• investigate suspected abuse, fraud, or security incidents;
• enforce our agreements and protect our users, rights, and systems; and
• comply with applicable law.

We do not use your resumes, LinkedIn exports, or job-search information for third-party advertising.

3. Artificial-intelligence processing

ResumeRuler uses Google's Gemini API (a paid commercial service from Google LLC) to perform defined language-processing tasks, such as extracting job requirements, creating structured evidence from resumes, evaluating the relationship between candidate evidence and job requirements, and drafting resume edits and cover letters you request. ResumeRuler uses deterministic software—not the AI provider—to apply final scoring weights, ranking rules, and thresholds.

Information sent to the AI provider may include relevant resume text, job descriptions, candidate-profile evidence, and stated job preferences. We do not send your raw LinkedIn archive or LinkedIn message bodies to the AI provider. Connection-related scoring uses normalized records and limited relationship signals calculated separately.

Google states that, for its paid Gemini API services, it does not use prompts or responses to improve its products, and that it logs prompts and responses only for a limited period, solely to detect and prevent violations of its policies. Google processes this information as a data processor under its Data Processing Addendum. Provider practices may change, and Google's applicable Gemini API terms and privacy documentation control its processing.

Analyses produced before September 12, 2026 were generated with Anthropic's commercial API under the equivalent terms then in force: no training on API inputs or outputs, and deletion of the prompts and responses held on Anthropic's systems within 30 days, as per Anthropic's terms. Those stored results are kept as generated; they are not re-sent to any provider.

ResumeRuler's scores and explanations may be incomplete or inaccurate. You should review job descriptions, resumes, and application materials yourself before relying on an output.

4. LinkedIn exports and information about other people

Uploading LinkedIn data is optional. ResumeRuler is not affiliated with or endorsed by LinkedIn.

The current import process sends the selected ZIP, CSV, or XLSX file to ResumeRuler's application server for processing. We inspect supported files, normalize connection records, and derive limited company-level relationship signals. From each connection we keep only the name, employer and job title; email addresses, profile links and phone numbers present in the file are discarded during the import and are never stored. We do not intentionally retain the original ZIP or its raw component files after the import request finishes. We retain the imported connection records, dataset metadata, and derived company-level aggregates until they are replaced, deleted, or the account is deleted, subject to the retention provisions below.

For message data, ResumeRuler is designed to use limited metadata needed to derive interaction signals, such as participants and interaction counts. It does not use or retain message-body content for scoring and does not send message bodies to the AI provider.

We use imported connection data for one purpose: to compute your Connection score and to show you, on your own job cards, which of your connections work at that company. We never contact your connections, never use their information for marketing, and never share it with other users or across accounts. Uploading a new file replaces the previous import, and removing the import from My account deletes the connection records and the derived company-level aggregates.

LinkedIn exports may contain personal information about your connections. You are responsible for uploading only information that you are permitted to provide and using it only for your personal job search. People whose information appears in a user-provided export may contact us as described in Section 12.

5. How we disclose information

We may disclose information in the following circumstances:

• Service providers. We use vendors to operate the Service, including Supabase for authentication, databases, and storage; Vercel for application hosting and analytics; Google (Gemini API) for AI processing; Inngest for durable workflow orchestration; Stripe and PayPal for payment processing; Resend for transactional email; Cloudflare for email-routing and related infrastructure; and Brave Search and DuckDuckGo for locating public job postings (they receive a job title, company, and city only). These providers process information for us under their applicable terms.
• At your direction. We may disclose or export information when you request it, use a sharing feature, or otherwise direct us to do so.
• Legal and safety reasons. We may disclose information when we reasonably believe it is necessary to comply with law or valid legal process; enforce our agreements; investigate fraud, abuse, or security incidents; or protect the rights, safety, and property of ResumeRuler, our users, or others.
• Business transactions. Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to applicable law.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use advertising cookies.

6. Data retention and deletion

We retain personal information for as long as reasonably necessary to provide the Service, maintain the integrity and security of our systems, resolve disputes, enforce agreements, and comply with legal obligations. Retention depends on the type of information and why it is processed.

In particular:

• account information, resumes, imported connections, job records, scores, and derived artifacts may be retained while your account is active;
• forwarded email content is intended to be transient and is cleared after the processing workflow consumes it; if processing is interrupted, it may be retained temporarily for recovery and troubleshooting;
• inbound-delivery metadata, deduplication records, model-usage records, and security records may be retained longer when needed for reliability, cost control, fraud prevention, or auditing;
• purchase, refund, promotional-code, and job-workflow balance records are retained for as long as needed for accounting, tax, dispute-resolution, and fraud-prevention purposes, which can be longer than the life of your account;
• original LinkedIn upload files are processed for import but are not intentionally stored as retained files after the import request completes;
• service providers may retain information according to their own documented schedules and contractual obligations; and
• residual copies may remain temporarily in backups or logs before being deleted or overwritten through ordinary retention cycles.

Removing a resume from active use may not immediately erase every derived score or historical artifact that relied on it. You may request deletion of your account and associated personal information by emailing support@resumeruler.com. We will delete or de-identify covered information from active systems unless retention is required or permitted for legal, security, fraud-prevention, dispute-resolution, or other legitimate purposes.

7. Cookies and similar technologies

ResumeRuler uses essential cookies and similar browser technologies to authenticate users, maintain secure sessions, protect the Service, and remember necessary account settings. These technologies are required for the Service to operate and cannot be disabled through ResumeRuler. Disabling all cookies or browser storage may prevent sign-in or cause parts of the Service to stop working.

ResumeRuler also uses Vercel Web Analytics to understand aggregated traffic and Service usage. This analytics service does not use cookies and is not intended to identify or track visitors across different websites.

We do not currently use advertising cookies or cross-site behavioral-tracking technologies. If we add non-essential cookies or similar technologies, we will update this policy and provide consent or opt-out controls where required by law.

8. Legal bases for users in the EEA, United Kingdom, and Switzerland

Where applicable data-protection law requires a legal basis, we process personal information:

• to perform a contract, including providing the Service you request;
• for our legitimate interests, including operating, securing, troubleshooting, and improving the Service, provided those interests are not overridden by your rights;
• with your consent, where we specifically request it and where consent is required; and
• to comply with legal obligations and protect legal rights.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

9. Your privacy rights and choices

Depending on where you live, you may have rights to:

• access or obtain a copy of personal information about you;
• correct inaccurate personal information;
• delete personal information;
• restrict or object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing relies on consent;
• opt out of certain targeted advertising, sale, sharing, or profiling activities; and
• appeal our response to a privacy request.

ResumeRuler does not currently sell personal information or use it for targeted advertising. To exercise an applicable right, email support@resumeruler.com. We may need to verify your identity and authority before completing a request. Applicable law may permit or require us to deny or limit a request in some circumstances. You may also have the right to complain to your local data-protection authority.

You can update certain profile information and remove or replace certain uploaded information through your account. You may unsubscribe from optional promotional emails using the link provided in those messages. We may still send essential account, authentication, security, billing, or service messages.

10. International data transfers

ResumeRuler and its service providers may process information in the United States and other countries where privacy laws may differ from those in your location. Where required, we use contractual or other recognized safeguards for international transfers. You may contact us for more information about safeguards applicable to your information.

11. Security

We use administrative, technical, and organizational measures designed to protect personal information. These include access controls, user-scoped database protections, encrypted network connections, private storage, authenticated service integrations, and data-minimization practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Protect your sign-in email account and your private ResumeRuler forwarding address. If you suspect unauthorized access or suspicious forwarding activity, contact us promptly and use any available forwarding-address revoke or rotation control.

12. Children

The Service is intended for job seekers and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

13. Third-party services and links

The Service may contain links to job boards, employer websites, LinkedIn, and other third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy. ResumeRuler is not responsible for the privacy, security, accuracy, or availability of third-party services.

14. Payments

ResumeRuler sells one-time plans; there is no subscription. Payments are processed by Stripe (cards, Apple Pay, Google Pay) or PayPal. When you pay, you give your payment details directly to that provider on its own checkout page, under its own terms and privacy policy. ResumeRuler does not receive or store your full payment-card number, security code, or PayPal credentials.

From the payment provider we receive what we need to deliver your purchase and keep our records: a transaction reference, the plan, the amount and currency, the payment status, and, for a refund or dispute, its status. We pass Stripe your email address so your receipt reaches you, and we pass either provider an internal account identifier so the purchase is credited to the right account.

If you redeem a promotional code, we record which code was used, by which account, and on which purchase, so that usage limits can be enforced. Refunds are issued to your original payment method through the same provider; our refund terms are in the Terms & Conditions.

15. Changes to this policy

We may update this Privacy Policy as the Service, vendors, or legal requirements change. We will post the updated policy with a revised "Last updated" date and provide additional notice when required by law or when changes are material.

16. Contact us

For privacy questions, requests, or complaints, contact:

ResumeRuler
Email: support@resumeruler.com
Website: https://www.resumeruler.com