Privacy Policy

Last updated: April 2026

1. What We Collect

When you use Resume Mentor, we collect:

  • Email address — to send your generated documents and track free-tier usage.
  • Resume file — the PDF or DOCX you upload.
  • Job description — text you paste or a URL you provide.
  • Generated documents — the tailored resume, cover letter, and study guide we produce for you.

We do not collect names, payment details, or any information beyond what is needed to run the service.

2. How We Use Your Data

Your data is used solely to:

  • Generate your tailored resume, cover letter, and study guide.
  • Email the generated documents to you.
  • Enforce the free-tier monthly usage limit.

We do not use your resume or job description to train AI models, sell data to third parties, or contact you for marketing purposes.

3. AI processing

Your resume and job description are sent to OpenAI's API for AI processing. As of March 2023, OpenAI does not use API data to train or improve its models by default. You can review OpenAI's data usage policy at openai.com/policies/api-data-usage-policies.

We do not use your data to train any AI models.

4. Third-party services

We use the following third-party services to operate Resume Mentor:

  • OpenAI — AI processing of your resume and job description.
  • Amazon Web Services (AWS) — file storage (S3) and email delivery (SES). Data is encrypted at rest using AES-256.
  • Stripe — payment processing (paid tier only). We never see or store your card details.

5. Data retention

Your data is automatically deleted after 7 days:

  • Uploaded resume files are deleted from our servers after 7 days.
  • Generated PDF documents are deleted after 7 days.
  • Parsed resume content and job description data are purged from our database after 7 days.

After 7 days, only anonymised metadata is retained (job status, timestamps) for operational analytics. Your email address is retained only to enforce the monthly usage limit.

6. Data security

All data is transmitted over HTTPS/TLS. Files are stored in private AWS S3 buckets (AES-256 encryption at rest) and are only accessible via time-limited signed URLs. We do not expose your data publicly.

7. Your rights

You may request immediate deletion of all data associated with your email address at any time — before the automatic 7-day deletion. Contact us at [email protected] and we will process your request within 48 hours.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions or data deletion requests, please contact us at [email protected].