Privacy Policy
Last updated: October 2026
Rezumable ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights as a user.
1. What data we collect
- Account information · your email address and, optionally, your name and location when you create an account.
- How you found us · when you sign up we record how you found us: campaign tags (including which network's ad-click tag your link carried, if any), the referring site's domain, the first page you visited and the page you signed up from.
- The job you came to check · when you sign up or sign in from a job's "Check my resume" button, we save that job's id to your account with the time you asked, so we can open it in Analyze for you, and we note when we opened it. We use these to count how many sign-ups arrive with a job and how many go on to check it. You asked for this, so we keep it whatever your analytics choice.
- Resume content · the text of any resume you upload. This is stored in your profile so you don't have to re-upload it every session. You can delete it at any time from your Profile page.
- Job descriptions · the job description text you paste into the analyzer. This is used only to generate your analysis and is not stored long-term beyond the 7-day analysis cache described below.
- Analysis results · the full structured output from each resume analysis (scores, bullet suggestions, dealbreaker check) is stored in your account so you can revisit and act on it at any time. This includes any revision decisions you make (Accept/Edit/Skip per bullet and summary).
- Resume library · metadata about resume files you upload (filename, extracted skills, years of experience estimate). The extracted metadata is used to power the resume picker and soft-match scoring. We do not retain the raw file content after parsing; only extracted structured data is stored.
- Job pipeline activity · which jobs you save, dismiss, analyze, or mark as applied, including any notes you add and the date you applied, so we can track your active job pipeline and application history.
- Usage metadata · how many analyses you run (for rate-limiting purposes), your browser fingerprint (hashed, unauthenticated guests only), and your IP address (hashed, never stored in plain text).
- Billing information · if you subscribe to a paid plan, checkout is handled by Dodo Payments, our merchant of record, who collects your email, billing country, and payment details. We never see or store your card number. We store your plan tier, your Dodo Payments customer and subscription identifiers, and subscription-event records (plan changes, cancellations) needed to run your account.
2. How we process your resume
When you run an analysis, your resume text and job description are sent to Anthropic's Claude API to generate structured feedback. Anthropic's API terms prohibit using API inputs to train their models, so your resume text is not used to train any AI model.
The raw LLM output is cached for up to 7 days so that re-running the same resume against the same job description doesn't consume unnecessary API calls. Cached results are keyed by a SHA-256 hash of the combined text and are automatically deleted after the TTL expires.
3. Anonymized knowledge extraction (opt-in)
If you opt in via the Help improve Rezumable toggle in your Profile → Data & Privacy settings, we extract anonymized, aggregated patterns from your analyses, for example:
- Which skills are frequently missing for a given role (e.g. "Product Manager")
- Which certifications are commonly required but absent
- Common missing themes in job descriptions for certain roles
- High-quality, anonymized experience bullet patterns (stripped of names, companies, and dates)
These patterns are stored in aggregate knowledge tables and are used to improve search quality and coaching tips for all users. No personal details, resume text, or identifying information is ever stored in these tables.
You can withdraw consent at any time by toggling the setting off. This does not affect any data already anonymized and stored in aggregate tables.
4. Data sharing
We do not sell your personal data. We share data only with:
- Anthropic (Claude API) · resume and JD text, solely to generate analysis results. Governed by Anthropic's API data processing terms.
- Supabase · our database and authentication provider. Data is stored in EU/US regions depending on your account location.
- Apify · job search queries (keywords and location only, never your resume or personal details) to fetch job listings.
- Dodo Payments · our payments provider and merchant of record. Receives your email and billing details when you purchase a subscription, governed by Dodo Payments' privacy policy. Dodo Payments never receives your resume or analysis data.
5. Cookies and local storage
We use session-only cookies to keep you logged in. We do not use advertising, tracking, or analytics cookies.
We use browser localStorage to remember your last job search terms across page navigations (cleared when you clear your browser data), your GDPR banner acknowledgement, and, when you are signed in, the open jobs page items described below.
During a visit we keep how you arrived (the campaign tags, referring site's domain, first page and the page you signed up from) in your browser's session storage, so it can be saved to your account when you sign up. It is cleared when you close the tab, sign out or sign up. If your browser sends Global Privacy Control or Do Not Track, we don't store it or save it to your account.
When you click "Check my resume" on a job before you have signed in, we keep that job's id in your browser's session storage, so we can open it in Analyze after you sign up or sign in. It is cleared when you close the tab or once the job is opened. It is not a cookie and is not used to track you.
On the open jobs pages, when you leave for an employer's site through Apply we keep that job's id, title and company in your browser's session storage for that tab, so we can ask whether you applied when you come back. If you are not signed in, your answers, the jobs you mark as applied, and whether you have seen the note about where Apply opens are kept there too, and are gone when you close the tab.
If you are signed in, your answers to "Did you apply to ...?" (by job, for 30 days), how many of those questions you dismissed in a row, and whether you have seen the note about where Apply opens are kept in this browser's localStorage under your account's id, so another account on this browser never sees them. They are removed when you sign out. Jobs you mark as applied are saved to your Jobs tracker in your account, not in your browser.
6. Data retention
- Account and profile data · retained until you delete your account.
- Analysis cache · automatically deleted after 7 days.
- Job pipeline · retained until you delete individual jobs or your account.
- Anonymized knowledge data (opt-in only) · retained indefinitely in aggregate form; cannot be individually identified or deleted once anonymized.
7. Your rights (GDPR / CCPA)
Depending on your location, you have the right to:
- Access · export your data from Profile → Data & Privacy
- Rectification · update your profile at any time
- Erasure · delete your account from Profile → Data & Privacy (all personal data removed within 30 days)
- Portability · export your data as JSON from Profile → Data & Privacy
- Withdraw consent · toggle the knowledge extraction opt-in off at any time
To exercise any right not covered by the self-service tools, email us at privacy@rezumable.com. We will respond within 30 days.
8. Security
All data is transmitted over HTTPS. Passwords are never stored. We use Supabase's email magic-link and OAuth authentication. Database access is row-level secured so each user can only read their own data.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of Rezumable after the effective date constitutes acceptance of the updated policy.
10. Contact
For privacy questions or requests, contact us at privacy@rezumable.com.