Privacy Policy
Last updated: 5 March 2026
1. Information We Collect
We collect information you provide when creating an account and building resumes: email address, name, and resume content (work history, education, skills, etc.). We also collect usage data such as pages visited and export actions to improve our service.
2. How We Use Your Information
Your data is used to provide the resume builder service, send account-related emails (verification, password reset), process payments where applicable, and improve our product. We do not sell your personal information to third parties.
3. Data Storage & Security
Your data is stored on secure servers. We use industry-standard practices to protect your information. Passwords are hashed and never stored in plain text.
4. Data Retention Policy
We keep your data only as long as necessary to provide the service or as required by law. The table below summarises how long each category of data is retained:
| Data Type | Retention Period | Notes |
|---|---|---|
| Account profile (name, email) | Until account deletion | Deleted immediately when you delete your account |
| Resume content & versions | Until account deletion | All resumes and version history are permanently deleted with your account |
| Cover letters | Until account deletion | Linked cover letters are deleted with the account |
| Export history logs | 90 days | Automatically purged after 90 days; used only for your export history view |
| AI usage logs (rate-limit counters) | Rolling 30 days | Used solely for enforcing daily AI usage limits |
| AI response cache | 24 hours | Cached LLM responses are automatically expired after 24 hours |
| Feature usage analytics | Rolling 90 days | Anonymised aggregate counts; no content stored |
| ATS score cache | Per resume version | Cleared when the resume is deleted |
| Session tokens | 14 days (rolling) | Invalidated on sign-out or account deletion |
| Password reset tokens | 1 hour | Single-use; expire automatically |
| Database backups | 30 days | Encrypted backups are retained for 30 days then permanently deleted |
| Payment & invoice records | 7 years | Required by Indian GST/financial regulations |
Your Rights
You have the right to access, correct, download, or permanently delete your personal data at any time. You can exercise these rights directly from your account:
Download my data
Settings → Data & Privacy → Download my data
Exports a JSON file with your profile, resumes, and cover letters
Delete my account
Settings → Data & Privacy → Delete account
Permanently and immediately deletes all your data. This cannot be undone
Correction
Settings → Profile
Edit your name, email, or profile picture at any time
To request data deletion or exercise any right not available through the interface, email us at privacy@resumedoctor.in. We will respond within 30 days as required under the Digital Personal Data Protection Act, 2023 (DPDPA).
5. Cookies & Analytics
We use cookies for authentication and session management. We may use analytics tools to understand how our service is used. You can control cookies through your browser settings.
6. Contact
For privacy-related questions or to exercise your rights, contact us at privacy@resumedoctor.in.