Who we are
myresumeai.io is operated by MyResumeAI Ltd, a company registered in England and Wales. We are the data controller for any personal data you provide when using the service. We are registered with the Information Commissioner’s Office (ICO) under registration number ZA000000. You can reach our data protection team at privacy@myresumeai.io.
What data we collect
- Account information — your email address, name, and (if you use Google sign-in) your basic profile picture.
- Resume content — the work history, skills, and personal details you paste, upload, or generate inside the builder.
- Job application history — jobs you save, apply to, or track inside MyResumeAI, plus any AI-generated cover letters and answers.
- Usage telemetry — aggregated, anonymised page views and feature usage so we can improve the product. No cross-site tracking.
How we use your data
- To provide the service you signed up for (resume building, applications, prep).
- To personalise AI suggestions and tailoring against the jobs you target.
- To improve the product through aggregated, de-identified analytics.
- To send transactional emails (account, billing, security) and, with your opt-in, occasional product updates.
- We never sell your data, and we never share your CV with recruiters, agencies, or third parties without your explicit action.
Legal basis (UK GDPR)
- Contract performance — we process your data to deliver the MyResumeAI service you signed up for.
- Legitimate interests — for product analytics, security logging, and preventing fraud or abuse.
- Consent — for optional marketing emails and any non-essential cookies. You can withdraw consent at any time.
Where we store data
Your data is stored in UK and EU data centres operated by our cloud provider. All data is encrypted with AES-256 at rest and TLS 1.2+ in transit. Backups are encrypted with the same standards and rotated on a 30-day window.
Third parties we use
- Anthropic — powers the AI features (resume rewriting, tailoring, interview prep). Prompts are processed in line with Anthropic’s zero-retention enterprise policy.
- Stripe — processes subscription payments. We never see or store your full card details.
- Resend — sends transactional and (opted-in) marketing emails on our behalf.
- Plausible — privacy-friendly, cookieless page-view analytics. No cross-site tracking, no fingerprinting, no PII.
Your rights under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — delete your account and personal data.
- Portability — export your resumes and applications in a machine-readable format.
- Restriction — ask us to pause processing in certain situations.
- Objection — object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, email privacy@myresumeai.io. We’ll respond within 30 days. You also have the right to lodge a complaint with the ICO.
How long we keep data
- Account data — until you delete your account, plus 30 days in cold backup.
- Payment records — 7 years, as required by HMRC.
- Server logs — 90 days, then permanently deleted.
Children’s privacy
MyResumeAI is intended for users aged 16 and over. We do not knowingly collect data from children under 16. If you believe a child has signed up, contact us and we’ll delete the account.
Contact
Questions about this policy? Email privacy@myresumeai.io. For general support, use contact@myresumeai.io.