This policy explains how MakePerfectResume ("MakePerfectResume", "we", "us") collects, uses and protects your personal data when you use our website, CV builder and related services. We are the data controller for the personal data described here.
1. Data we collect
- Account data: name, email address, password (hashed), and profile details from Google or LinkedIn if you sign in with them.
- CV and cover letter content: the information you enter or upload, such as work history, education, skills, contact details and an optional photo.
- Payment data: plan, amount, currency and transaction references. Card and UPI details are processed by Stripe or Razorpay and never stored by us.
- Usage data: pages visited, features used, AI actions performed, device and browser information, and approximate location derived from your IP address.
- Communications: messages you send to support and your email preferences.
2. How we use your data and our lawful bases
- To provide the service (contract): create and store your CVs, generate downloads and process payments.
- AI features (contract): when you use an AI action, the relevant text is sent to our AI provider (OpenAI) to generate a response. Our provider does not use API data to train its models.
- To improve and secure the service (legitimate interests): analytics, fraud prevention, rate limiting and debugging.
- Marketing emails (consent): only if you opt in. You can unsubscribe at any time.
- Legal obligations: tax and accounting records.
3. Who we share data with
We never sell your personal data. We share it only with processors who help us run MakePerfectResume – hosting, email delivery, payment processing (Stripe, Razorpay), AI processing (OpenAI), error monitoring and analytics – under written data processing agreements. Your CV is only public if you switch on a public share link.
4. International transfers
Some processors are located outside the UK, EEA or India. Where this happens we rely on adequacy regulations, the UK International Data Transfer Addendum or EU Standard Contractual Clauses, and equivalent safeguards under India's Digital Personal Data Protection Act 2023.
5. How long we keep data
We keep your account and CVs for as long as your account is active. If you delete your account, we delete your CVs and profile within 30 days, except for payment records we must keep for up to 7 years for tax purposes. Anonymous ATS checks from signed-out visitors are deleted after 30 days. Resumes uploaded to our ATS Resume Checker (resume score) are deleted as soon as their text has been read; the report is held only in your temporary session and expires automatically when the session ends.
6. Your rights
Under UK GDPR, EU GDPR and the DPDP Act you may have the right to access, correct, export, restrict or delete your data, object to processing and withdraw consent. You can download or delete your data from your account settings at any time, or email privacy@makeperfectresume.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk), your local EU supervisory authority or the Data Protection Board of India.
7. Security
Data is encrypted in transit (TLS) and at rest. Access is restricted to staff who need it, and we regularly review our security controls.
8. Cookies
See our Cookie Policy for details of the cookies we use and how to control them.
9. Children
MakePerfectResume is not intended for children under 16. We do not knowingly collect data from children under 16.
10. Contact
MakePerfectResume, CHANGE_ME your registered address, India. Email: privacy@makeperfectresume.com.