Privacy policy
Last updated: 13 October 2026. Draft pending legal review.
HiredResumeAI ("we", "us") runs hiredresumeai.com, a resume and CV builder. This policy explains what personal data we collect, why, who processes it for us and the rights you have. Contact us at privacy@hiredresumeai.com.
What we collect
| Data | When | Why (legal basis) |
|---|---|---|
| Email address and name | When you sign in with a magic link | To run your account (contract) |
| Resume and cover letter content, photos | When you write or upload them | To build, save and export your documents (contract) |
| Uploaded files (PDF, DOCX, LinkedIn exports) | When you import a resume | To extract your details; deleted within 24 hours (contract) |
| Usage data: pages viewed, features used, AI action counts | When you use the site | To enforce plan limits, prevent abuse and improve the product (legitimate interests; analytics only with consent in the EU/UK) |
| Payment status: plan, renewal date, country, currency | When you buy Premium | To unlock Premium (contract) and keep tax records (legal obligation) |
We never see your card details. Payments are handled by Dodo Payments, our merchant of record.
Before you create an account, your draft stays in your browser (IndexedDB) and is not sent to us.
Services that process data for us
| Service | Purpose | Data shared |
|---|---|---|
| Cloudflare | Hosting, database (D1), file storage (R2), PDF rendering, bot protection (Turnstile) | All data stored in the service |
| Anthropic (Claude), via Cloudflare AI Gateway | AI writing, tailoring, ATS checks and resume import | The text needed for the AI action you asked for |
| Dodo Payments | Payments, tax, invoices | Email, name, country, payment details you enter with them |
| Amazon Web Services (SES) | Sending sign-in and account emails | Email address |
| PostHog | Product analytics (only with consent in the EU/UK) | Pseudonymous usage events; never resume content |
| Sentry | Error reports | Technical error data; we scrub resume content |
| OpenAI | Illustrations for our blog | No user data |
Your resume data is not used to train AI models. We use the providers' API terms, under which inputs are not used for training.
International transfers
Our providers may process data outside your country, including in the United States. Where required we rely on Standard Contractual Clauses or an adequacy decision.
How long we keep data
- Account and documents: while your account is open. Deleted items stay in Trash for 30 days, then are erased.
- Uploaded import files: deleted within 24 hours.
- Cached PDFs: deleted with your account.
- AI usage counts and download logs: up to 24 months, for limits and abuse prevention.
- When you delete your account it is disabled at once and erased, with its files, within 30 days. Payment and tax records held by Dodo Payments are kept by them as the law requires and are outside our control.
Your rights
You can access, export, correct or delete your data, object to processing and withdraw consent at any time. Most of this is self-service on the Your data page: download everything as a ZIP, delete items, turn analytics off or delete your account. For anything else, email privacy@hiredresumeai.com. You can also complain to your data protection authority (in the UK, the ICO).
Cookies
We use one essential cookie to keep you signed in. Analytics cookies are only set with your consent in the EU and UK; elsewhere you can turn analytics off on the Your data page.
Children
HiredResumeAI is not for anyone under 16.
Changes
We'll update the date above and tell signed-in users about significant changes by email.