ResumeMD
Back to Home

Privacy Policy

Last updated: December 24, 2025

At ResumeMD, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume building service.

1. Information We Collect

1.1 Information You Provide

When you use ResumeMD, you may provide us with:

  • Account Information: Email address, name, and password when you create an account
  • Resume Content: The text, formatting, and information you include in your resumes
  • Profile Information: Avatar selection and display preferences
  • Payment Information: If you subscribe to Pro, payment details are processed securely by our payment provider (Stripe)

1.2 Information Collected Automatically

When you access our service, we may automatically collect:

  • Usage Data: Pages visited, features used, and interactions with the editor
  • Device Information: Browser type, operating system, and device identifiers
  • Log Data: IP address, access times, and referring URLs

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our resume building service
  • Process your transactions and manage your account
  • Sync your resumes across devices (for authenticated users)
  • Send you service-related communications
  • Respond to your comments, questions, and support requests
  • Monitor and analyze usage patterns to improve user experience
  • Detect, prevent, and address technical issues and security threats

3. Data Storage and Security

3.1 Local-First Architecture

ResumeMD is built with a local-first architecture. For unauthenticated users, all resume data is stored exclusively in your browser's local storage and never transmitted to our servers. This means your data stays on your device unless you choose to create an account.

3.2 Cloud Storage

If you create an account, your resume data is securely stored in our cloud database (powered by Supabase) to enable cross-device synchronization. We implement:

  • Encryption in transit (TLS/SSL) and at rest
  • Row-level security ensuring you can only access your own data
  • Regular security audits and updates
  • Secure authentication via industry-standard protocols

3.3 Data Retention

We retain your account information and resume data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

4. Information Sharing

We do not sell, trade, or rent your personal information. We may share your information only in these circumstances:

  • Service Providers: With trusted third parties who assist in operating our service (e.g., hosting, payment processing)
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize us to share your information

5. Your Rights and Choices

You have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your account and associated data
  • Export: Export your resume data in standard formats (PDF, Markdown)
  • Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, please contact us at privacy@resumemd.pro.

6. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We do not use third-party advertising cookies. You can control cookie settings through your browser.

7. Third-Party Services

Our service integrates with the following third-party services:

  • Supabase: Database and authentication services
  • Stripe: Payment processing (for Pro subscriptions)
  • Google/GitHub: Optional social login providers

Each of these services has their own privacy policies governing their use of your data.

8. Children's Privacy

ResumeMD is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: