Privacy Policy

• Account data — your name, email, and a securely hashed password (we never store your password in plain text).
• Content you create — the resumes, job descriptions, and related text you build, import, or score.
• Access status — which pass you bought and when it expires.
• Payment data — handled by Lemon Squeezy, our Merchant of Record. We receive confirmation of your purchase and your email, but we never see or store your full card details.
• Essential technical data — a signed session cookie and basic security logs (such as timestamps and rate-limit counters) needed to keep the service running and safe.

We use your data to create and secure your account, store and display your resumes, generate the AI suggestions you request, process access passes, send you service and receipt notifications, and keep the service working and safe.

Where the GDPR or similar laws apply, our legal bases are: performance of a contract (providing the service you sign up for), legitimate interests (keeping the service secure and preventing abuse), consent (which you give at signup and can withdraw), and legal obligation (e.g. tax and accounting records).

We share data only with the providers needed to run the service:

• Lemon Squeezy — payments, tax, and receipts.
• AI providers — when you ask for AI tailoring, scoring, or suggestions, the relevant resume/job text is sent to a third-party AI provider (such as Google, OpenAI, Groq, or Azure OpenAI, depending on our configuration) to generate a response. This text is processed solely to return your requested output; these providers do not use API content to train their models.
• Hosting & infrastructure — providers that host the application and store your data so we can operate the service.

We do not sell your personal data or use it for third-party advertising.

We use a single essential cookie to keep you signed in (a signed session cookie). We do not use advertising or third-party tracking cookies. Because this cookie is strictly necessary to operate the service, it is set when you log in.

Our service providers may process data in countries outside your own, including the United States. Where required, such transfers are covered by appropriate safeguards (for example, the European Commission’s Standard Contractual Clauses).

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, export it (portability), object to or restrict certain processing, and withdraw consent at any time. You can delete individual resumes yourself at any time, or contact us to close your account and remove your personal data. We aim to respond to requests within 30 days, and you have the right to complain to your local data-protection authority.

Your resumes are kept until you delete them or close your account. Essential security logs are kept only as long as needed for security and abuse prevention. Some records (e.g. purchase history held by our payment processor) may be retained where required by law.

Tune My Resume is intended for users aged 16 and over and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.

Passwords are salted and hashed, sessions are protected with signed cookies, and access is restricted to what’s needed to operate the service. No system is perfectly secure, but we take reasonable measures to protect your data.

We may update this policy from time to time. When we make material changes we’ll update the effective date above and, where appropriate, notify you in the app. Your continued use of the service after an update means you accept the revised policy.

For any privacy request or question, email [email protected].