1. Who we are
Resume Studio ("we", "us", "our") (ABN 35 478 248 536) is based in Sydney, New South Wales, Australia. We are the data controller responsible for your personal information.
For any privacy question or request, contact us at support@resume-studio.app.
2. What information we collect
You can browse and build a resume without creating an account. The information we hold depends on how you use the service:
| Information | What it is | When we collect it |
|---|---|---|
| Résumé content | The details you enter or import: name, contact details, location, work and education history, skills, and anything else you choose to add, including an optional profile photo. | When you build or import a resume. |
| Career profile | An optional durable profile you keep separately from any single resume: your work and education history, skills, contact details, and a log of achievements (wins) you add over time. We use it to pre-fill new resumes and to ground interview practice. | When you build your Career profile. |
| Practice interview data | If you use interview practice: the job description you paste, your typed answers, and the feedback we generate. It is grounded in a resume you choose (or paste), and saved to your account so you can revisit it. | When you run a practice interview. |
| Account email | The email address you sign in with. | When you sign in. |
| Google sign-in data | If you choose to sign in with Google, we receive your name, email address, and profile picture from Google to identify your account. We never receive your Google password. | When you sign in with Google. |
| Sign-in tokens | Single-use, short-lived magic-link tokens, stored only in hashed form. | When you request an email sign-in link. |
| Session & technical data | A session identifier, your IP address, and browser user-agent, used to keep you signed in and to protect the service. | Automatically, as you use the site. |
| Purchase records | Records of resume-export purchases (amount, date, and a payment reference). We never see or store your full card details. Payment is handled entirely by Stripe. | When you buy resume exports. |
A resume can incidentally reveal sensitive information (for example, membership of an organisation, or volunteering that implies health, religious, or political affiliations). You decide what to include, please only add what you're comfortable storing with us.
3. How we use your information
- To provide the editor, save your work, and generate your PDF.
- To sign you in and keep your session secure (passwordless).
- To process purchases and apply your resume exports.
- To send essential transactional emails (such as your sign-in link).
- To keep the service safe: rate limiting, fraud and abuse prevention, and debugging.
- To meet our legal, tax, and accounting obligations.
We do not sell your personal information, and we do not use it for advertising or third-party tracking.
4. Legal bases for processing (GDPR / UK GDPR)
- Performance of a contract: providing the editor, saving your resumes, and generating your PDF.
- Legitimate interests: keeping the service secure and preventing abuse, balanced against your rights.
- Consent: where we ask for it (for example, any optional or future marketing emails). You can withdraw consent at any time.
- Legal obligation: retaining purchase records for tax and accounting law.
5. AI-assisted features
We offer optional AI-assisted features that you can choose to use: importing an existing resume (you upload a PDF and we pre-fill the editor for you), writing assistance in the editor (drafting or improving your summary or experience bullet points), and interview practice (we run a mock interview based on a job description you paste and the resume or Career profile you choose, then give you feedback). When you use one of these features, the relevant content is sent to our AI provider, Anthropic (the maker of Claude), purely to produce the result. That content can include personal information, so we want to be clear about it:
- This only happens when you actively use one of these features. For import, we send the PDF you upload; for writing assistance, we send the text you are working on and the related role context; for interview practice, we send the job description, a summary of the resume or Career profile you choose, and your answers.
- For import and writing assistance, the result is returned as an editable draft, and nothing is applied until you choose to. A practice interview is saved to your account (the job description, your answers, and the feedback) so you can revisit it, and you can delete any session, or your whole account, at any time.
- Anthropic processes this content only to provide the result and does not use it to train its models.
7. Where your data is stored & international transfers
Your resumes, account, and database records are hosted in Sydney, Australia. Some of our service providers (above) are based overseas, primarily in the United States, so using them involves transferring data internationally.
Where we transfer data out of the European Economic Area or the United Kingdom, we rely on an appropriate safeguard, typically the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us for more detail using the contact below.
8. How long we keep your data
| Data | Retention |
|---|---|
| Your account, resumes, and saved content | Until you delete them or close your account. |
| Practice interview sessions | Until you delete them or close your account. |
| Career profile & achievements | Until you delete them or close your account. |
| Anonymous (no account) data with no saved resume | Automatically purged after a short period of inactivity. |
| Sessions | Up to 30 days, then expired and purged. |
| Sign-in tokens | 15 minutes, single-use, then purged. |
| Purchase records | Kept (with personal details removed where possible) for as long as Australian tax and accounting law requires, generally 5 years. |
When you delete your account, we remove your resumes, profile, Career profile, practice interviews, and sessions. If you have made a purchase, we keep the purchase record but strip it of identifying details, because we are legally required to retain financial records.
10. How we protect your data
- Passwordless sign-in: we never store passwords, so there's no password to leak.
- Sign-in tokens are hashed; session cookies are opaque and httpOnly.
- Encrypted connections (HTTPS) and encryption of data at rest.
- Rate limiting, strict access controls so you can only reach your own data, and regular security review.
No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong, including notifying you and the relevant authority where the law requires.
11. Your rights & choices
Depending on where you live, you may have the right to access, correct, delete, export, restrict, or object to our use of your personal information, and to withdraw consent. You can exercise the core rights directly in the app:
- Export: download a machine-readable copy of your account and resume data from your account menu.
- Delete: permanently delete your account and content from your account menu.
For anything else, email support@resume-studio.app. We aim to respond within 30 days. If you are in Australia and are unhappy with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au); in the EEA/UK, you can complain to your local data protection authority.
12. Children
Resume Studio is not intended for children under 16. We do not knowingly collect personal information from children under that age. If you believe a child has provided us information, contact us and we'll delete it.
13. Changes to this policy
We may update this policy from time to time. We'll change the "last updated" date above and, for material changes, take reasonable steps to notify you.
14. Contact us
(ABN 35 478 248 536)
Sydney, New South Wales, Australia
support@resume-studio.app