Privacy Policy

This Privacy Policy explains how Resumelyn ("we", "us", "our") collects, uses, and protects your personal data when you use our platform, website, and services. We design our privacy practices to comply with applicable data protection and privacy laws in the jurisdictions where we operate.

1. Who We Are and Contact Information

Resumelyn
KVK: 42177423
Chassestraat 31, Amsterdam, Netherlands
Email: hello@resumelyn.com

2. Personal Data We Collect

We collect various categories of data to provide our services:

• Account Data: Name, email address, authentication credentials, and profile details.
• CV and Professional Information: Data you upload or input, including work history, education, skills, languages, location, and documents.
• Application Tracking & Analytics Data: Jobs you apply to, application dates, interview status, and overall product usage analytics.
• Subscription and Payment Data: Transaction records and billing information (processed securely by our payment provider).
• Technical Data: IP address, browser type, device information, and log data.

3. How We Use Personal Data & Legal Bases

We process your data based on the following legal grounds, where applicable (e.g., under the GDPR):

• Contractual Necessity: To create your account, provide the CV builder, process AI outputs, maintain your application tracker, and administer your subscription.
• Legitimate Interests: To secure the platform, prevent fraud, improve our AI functionality, and provide aggregated analytics.
• Consent: Where required by law (e.g., for certain non-essential cookies or specific marketing communications).
• Legal Obligations: To comply with tax, accounting, or other statutory requirements.

4. AI Processing

We use artificial intelligence to provide core features, including CV improvement, job tailoring, and cover letter generation. The professional data you provide is processed by our AI models (e.g., OpenAI) to generate these outputs. We do not use your personal data to independently train broad foundation models without a legal basis.

5. Talent Pool and Recruiter Access

Creating a Resumelyn account includes participation in the Resumelyn Talent Pool as part of the core service. Your professional profile and relevant CV information may be made available to recruiters.

What recruiters can see: Recruiters may search and filter candidate profiles based on professional information such as experience, skills, roles, languages, location, and other relevant profile details.

What recruiters CANNOT see: Recruiter access does not include your billing information, internal AI credits, private application tracker analytics, account credentials, or private payment information.

Resumelyn Verification: Verified profiles go through CV analysis and a manual verification process. Recruiters may use "Resumelyn Verified" as a filter to identify candidates who have completed this process.

6. Data Sharing and Service Providers

We share your data only with trusted third-party service providers (processors) necessary to operate our service. These may include providers such as Clerk (authentication), Vercel (hosting), Supabase (database), OpenAI (AI processing), and our payment, email, and analytics providers. We do not sell your personal data.

7. International Transfers

If personal data is transferred outside the European Economic Area (EEA) or UK, we rely on lawful transfer mechanisms, such as Adequacy Decisions or Standard Contractual Clauses (SCCs), to ensure your data remains protected.

8. Security and Data Retention

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no internet transmission is entirely risk-free.

We retain your personal data for as long as your account is active or as needed to provide you the services. [RETENTION PERIOD TO BE CONFIRMED]. After this period, data is deleted or anonymized unless a longer retention period is required by law.

9. Your User Rights

Depending on your location (e.g., under the EU GDPR, UK GDPR, PIPEDA, or applicable US state privacy laws), you may have the right to:

• Request access to the personal data we hold about you.
• Request rectification of inaccurate data.
• Request erasure of your data (right to be forgotten).
• Request restriction of processing or object to our processing (including in the Talent Pool).
• Request data portability.
• Withdraw your consent at any time (where processing relies on consent).
• Lodge a complaint with your local data protection supervisory authority.

To exercise these rights, please contact us at hello@resumelyn.com.

10. Children

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

11. Changes and Cookies

We may update this Privacy Policy from time to time. Please see our Cookie Policy for information on how we use cookies and tracking technologies.