Privacy Policy

This Privacy Policy explains how ResumeStitch (“ResumeStitch”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards your personal data when you use our website and resume-tailoring services (the “Service”). ResumeStitch is operated as a sole proprietorship based in San Antonio, Texas, United States. By using the Service, you agree to the practices described in this Policy.

Because the Service processes the contents of your resume and the job descriptions you provide — which often include detailed personal information — we treat that data with particular care. Please read this Policy alongside our Terms of Service.

1. Who is responsible for your data

ResumeStitch is the data controller for personal data processed through the Service. For any privacy question or to exercise your rights, contact us at support@resumestitch.comwith “Privacy” in the subject line.

2. Information we collect

2.1 Information you provide

• Account information: your email address, display name, and a securely hashed password. If you enable multi-factor authentication, we store the secret and recovery codes in hashed/encrypted form.
• Resume content: the resumes you upload or create, including your name, contact details, work history, education, skills, certifications, and projects. This may constitute sensitive personal information.
• Job descriptions: the job postings or descriptions you paste or import for tailoring.
• Generated content: tailored resumes, cover letters, interview prep, and application-tracking entries you create within the Service.
• Communications: messages you send us by email or through support channels.

2.2 Information collected automatically

• Usage and log data: feature usage, timestamps, and request metadata used to operate, secure, and improve the Service.
• Device and connection data: IP address and browser/user-agent information, used for security, rate-limiting, and abuse prevention.
• Diagnostics: error and performance data captured by our monitoring provider when something goes wrong.
• Cookies: strictly necessary cookies that keep you signed in and protect your session. We do not use advertising or cross-site tracking cookies. See Section 10.

2.3 Payment information

Payments are processed by Stripe. We do not collect or store your full card number — Stripe handles card data in accordance with PCI-DSS. We retain a Stripe customer identifier and non-sensitive subscription details (plan, status, renewal date).

3. How we use your information

• To provide, operate, and maintain the Service and your account.
• To generate tailored resumes and related content using artificial intelligence (see Section 4).
• To process payments, manage subscriptions, and prevent billing fraud.
• To authenticate you, secure accounts, and detect or prevent abuse.
• To send transactional communications (verification, password reset, security and account notices) and, where permitted, product updates you can opt out of.
• To provide customer support and respond to your requests.
• To comply with legal obligations and enforce our Terms.

4. AI processing of your content

To tailor your resume, we transmit the relevant resume and job-description text to our AI provider, Anthropic, via the Claude API. This processing happens only when you initiate an action that requires it (for example, generating a tailored resume or cover letter).

Anthropic processes this content as our service provider to return a result to you. Under Anthropic's commercial API terms, content submitted through the API is not used to train their models. AI output can contain errors or omissions; you are responsible for reviewing it for accuracy before relying on it.

5. Service providers and sub-processors

We share personal data with the trusted providers below only to the extent needed to operate the Service. They are bound by contractual obligations to protect your data and to process it only on our instructions.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

6. Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we rely on:

• Performance of a contract — to deliver the Service you sign up for.
• Legitimate interests — to secure, maintain, and improve the Service, balanced against your rights.
• Consent — for optional communications; you may withdraw consent at any time.
• Legal obligation — to comply with applicable law.

7. International data transfers

We are based in the United States and our providers store data in the United States. Where we transfer personal data from the EEA, UK, or other regions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an equivalent mechanism offered by our providers.

8. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete content or your account, we delete or anonymize the associated personal data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies may persist in backups for a limited time before being overwritten.

9. Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal data:

• Access a copy of the data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (“right to be forgotten”).
• Export your data in a portable format.
• Restrict or object to certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority. California residents have the rights to know, delete, correct, and to not be discriminated against for exercising these rights under the CCPA/CPRA; because we do not sell personal data, no opt-out of sale is needed.

You can export or delete your data directly from Settings while signed in, or email support@resumestitch.com. We will respond within the timeframes required by applicable law.

10. Cookies

We use only strictly necessary cookies — primarily a secure session cookie that keeps you signed in and protects against cross-site request forgery. We do not use third-party advertising or analytics tracking cookies. Because these cookies are essential to the Service, disabling them may prevent you from signing in.

11. Security

We protect your data with industry-standard measures, including encryption in transit (TLS), encryption at rest for stored data, hashed passwords, optional multi-factor authentication, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

Questions about this Policy or our data practices? Email support@resumestitch.com or visit our Contact page.