Privacy Policy

Data Controller

Data Controller: Domantas Kazlauskas (sole proprietor), Vilnius, Lithuania. Contact: domantas.kazl1@gmail.com

1. Information We Collect

When you use Resuvolt, we collect the following types of information:

• Account information: Your email address and authentication credentials when you create an account. If you sign in with Google, we also receive your display name, profile picture URL, and Google account identifier.
• Resume content: The resume text you provide for tailoring, including any personal details contained within it.
• Resume builder data: Structured CV data (contact information, work history, education, skills, languages, certifications, and references) entered through the resume builder form. This data is stored in our database and used to populate CV templates. Builder resumes may also be added to your Resume Vault for reuse.
• Job descriptions: The job posting text you submit for resume matching and tailoring, including descriptions captured by our Chrome extension from supported job platforms (LinkedIn, Indeed, Glassdoor).
• Job application tracker data: When you use the job application tracker (including via our Chrome extension), we store the company name, role title, job URL, application status, personal notes, and applied date associated with each tracked application.
• ATS simulation data: Resume text submitted for ATS compatibility analysis. For unauthenticated users, this data is processed in-memory and is NOT stored — the analysis is entirely stateless. For authenticated users, Authenticated ATS simulation results are cached for up to 7 days to allow users to review their results, after which they are automatically deleted.
• Career stage preference: Your selected career stage (entry, mid, senior, executive, career changer), used to adjust AI tailoring tone and suggestions. This preference is stored in your account settings.
• Country selection: If you choose to specify a target country (from our 24 supported country profiles), we collect that selection to customize AI output to match region-specific CV formatting conventions. Country selection is optional and is used solely for CV format optimization — it is not used for tracking, profiling, or advertising purposes. Country selections are not stored permanently and are only retained for the duration of the processing session.
• Language preference: Your preferred UI language (one of 15 supported languages) is auto-detected from your browser settings and stored in your browser's localStorage. This data never leaves your device and is not transmitted to our servers.
• Live usage counters: We display global usage statistics (total resumes tailored, cover letters created, interview preps generated). These counters are anonymized and aggregated — they contain no personal data and cannot be used to identify individual users.
• Photo upload: If you upload a photo for use in CV templates (e.g., German Lebenslauf, French CV Narratif, Europass, Modern International) or the resume builder, the image is stored securely in Supabase Storage and associated with your account. Photos are used solely for inclusion in generated CV documents and are deleted when you remove the photo or delete your account.
• Chrome extension resume sync: Your latest master resume text is synced to the extension's local storage (chrome.storage.local) for client-side keyword matching against job descriptions. This data stays on your device and is not transmitted to third parties for this feature.
• Chrome extension job saving: When you save jobs from the extension, the job title, company name, and URL are sent to our servers and stored in your job application tracker.
• Job description scraping: Our Chrome extension and web interface use algorithmic (non-AI) scraping to extract job description text from supported platforms. No AI is used in the extraction process — only structured parsing of page content.
• Resume parsing for templates: When you use our CV template features, your resume content is parsed algorithmically (without AI) to populate template fields. This parsing happens on our servers and the parsed data is used solely for template generation.
• Review prompt tracking: We use your browser's localStorage to track whether you have been shown a review prompt and your response. This data never leaves your device and is not transmitted to our servers.
• Early Adopter coupon system: If you redeem a promotional coupon code (e.g., EARLY100), we store the coupon code and redemption status in your account record to apply the associated pricing. Coupon usage data is retained for the duration of your subscription.
• Plan and subscription data: Your current plan (Free, Starter, Pro Monthly, Pro Annual, or Job Search Pass), subscription start date, and for Job Search Pass, the 90-day expiry date after which your account reverts to Free.
• Fair usage enforcement data: For plans with unlimited AI generations (Pro Monthly, Pro Annual, Job Search Pass), we log per-account AI call counts within each billing period to enforce the 5,000 AI call fair usage cap. These counts are reset at the start of each billing period and are used solely for abuse prevention, not for profiling or advertising.
• Currency display: Prices are displayed in up to 8 currencies (USD, EUR, GBP, CHF, SEK, NOK, DKK, PLN) based on your selected country. Currency selection is derived from your country preference and is not separately tracked or stored.
• Competitor comparison: Our landing page includes a comparison table featuring publicly available information about competitor services. No personal data of competitors or their users is collected, stored, or processed for this feature.
• Session storage (try-without-signup): Unauthenticated users may enter resume and job description text to preview our service. This data is stored temporarily in your browser's session storage and is cleared after use. It is not transmitted to our servers unless you initiate an AI processing request.
• Cover letters: Text generated or provided through our Cover Letter and Interview Prep features.
• Usage data: Information about how you interact with our service, including tailoring history, feature usage, monthly usage counters (e.g., AI calls per month), and session data.
• Analytics data: We use Vercel Analytics to collect anonymized, aggregated usage metrics such as page views, visit duration, and referral sources. Vercel Analytics does not collect personally identifiable information (PII), does not use cookies, and does not track individual users across sessions.
• Referral data: Referral codes you generate or use, and associated signup tracking to administer our referral program.
• Payment information: Billing details processed securely through Stripe. We do not store your full credit card number.
• AI input analysis: We analyze whether the resume or other text you provide appears to be AI-generated. This detection result is used internally to optimize output quality and is stored alongside your tailoring request.
• Feedback and ratings: When you provide feedback on AI-generated results (e.g., thumbs up/down ratings), we store that feedback linked to the corresponding output to improve our service.
• Edit tracking: When you modify AI-generated output (e.g., editing a tailored resume before downloading), we record those modifications to understand how users refine results and to improve our AI models.

2. How We Use Your Data

We use your information to:

• Tailor your resume to match specific job descriptions using AI, including adapting output to country-specific CV formatting conventions when a target country is selected.
• Generate cover letters and provide interview preparation assistance using AI.
• Populate and render CV templates with your resume builder data, including generating downloadable documents from structured input.
• Simulate ATS parsing behavior algorithmically (no AI is used for this feature) to provide compatibility analysis and formatting recommendations.
• Provide instant keyword matching in the Chrome extension, processed entirely on your device using locally stored resume data.
• Maintain your tailoring history so you can review, reuse, and export (CSV) past results.
• Manage your account and process payments.
• Enforce the 90-day expiry on Job Search Pass purchases and automatically revert accounts to the Free tier upon expiry.
• Monitor AI call counts for unlimited-plan subscribers to enforce the 5,000 call fair usage cap per billing period.
• Detect whether your input text appears to be AI-generated, in order to adjust processing and produce higher-quality, human-sounding output. When AI-generated input is detected, we apply more aggressive rewriting techniques to ensure the final output reads naturally.
• Analyze your feedback ratings (thumbs up/down) and edit patterns to measure output quality and improve our AI models.
• Improve our service and develop new features.
• Communicate with you about your account, updates, or support requests.

3. AI Processing Transparency

Resuvolt uses Google's Gemini API to process resume tailoring, cover letter generation, and interview preparation requests. Your resume text, job descriptions, and country selection (when provided) are sent to this third-party AI provider for processing. We do not use AI to fabricate experience, qualifications, or credentials — our AI enhances and rephrases your existing content.

Input truncation: Resume text and job descriptions are truncated to 5,000 characters each before being sent to the AI provider, limiting the amount of personal data transmitted.

Prompt caching: We use Google's prompt caching feature to improve processing efficiency. Cached prompts contain system instructions only — no user data is included in cached content.

Streaming: AI outputs are streamed directly to your browser and are not stored on third-party servers. Once processing is complete, the generated content is stored only within our own infrastructure.

Our AI-optimised resumes typically score ~75-85% on leading AI detectors. We are transparent about our use of AI and do not attempt to bypass detection tools.

4. Rate Limiting

Unauthenticated users are limited to 1 AI processing request per 24 hours. To enforce this limit, we temporarily log the user's IP address. IP data used for rate limiting is not stored permanently and is automatically purged after 24 hours. It is not used for any other purpose.

5. Signup Wall

Unauthenticated users can preview match scores but must create an account to access full tailoring results. Account creation requires an email address and creates a user profile stored in our database. By signing up, you consent to the collection and processing of your email and profile information as described in this policy.

6. Minimum Age Requirement

You must be at least 16 years old to use Resuvolt. If you are under 16, you may only use the service with verifiable parental or guardian consent, in accordance with GDPR Article 8.

7. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR) and equivalent applicable laws:

• Performance of a contract (Article 6(1)(b)): Processing necessary to provide you with the Resuvolt service, including AI-powered resume tailoring, cover letter generation, resume builder functionality, job application tracking, and account management.
• Legitimate interest (Article 6(1)(f)): Processing feedback ratings, edit tracking data, AI input detection results, and analytics data for the purpose of improving service quality and AI model accuracy. Processing resume text for ATS simulation analysis for unauthenticated users on the basis of providing a useful free tool — no personal data is retained from these sessions. We have conducted a balancing test and determined that these interests do not override your fundamental rights and freedoms. You have the right to object to this processing at any time.
• Consent (Article 6(1)(a)): For optional features such as country selection for region-specific CV formatting and career stage selection for tailoring tone adjustment. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legal obligation (Article 6(1)(c)): Where we are required to retain certain data by applicable law, such as financial transaction records.

8. Data Storage and Security

Your data is stored securely using Supabase, which provides AES-256 encryption at rest and TLS/HTTPS encryption in transit. We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, or destruction. Access to user data is strictly limited to authorized personnel and automated systems required to operate the service.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, in accordance with GDPR Article 34.

9. Third-Party Services

We use the following third-party services to operate Resuvolt:

• Stripe: For secure payment processing. Stripe handles all payment data under its own privacy policy.
• Google (Gemini API): AI processing of resume content, cover letters, and interview preparation. Your content is processed through our multi-layer AI writing quality pipeline, which includes style anchoring, vocabulary filtering, and burstiness optimization to produce natural-sounding output. Resume text, job descriptions, and country selection (when provided) are sent to Google for processing via the Gemini API. Input text is truncated to 5,000 characters before transmission. Google acts as a data processor on our behalf and processes data in accordance with its privacy policy and our data processing agreements. We do not store AI-generated outputs on third-party servers.
• Supabase: For authentication and database services.
• Vercel: For hosting and serving our web application.
• Vercel Analytics: For anonymized, aggregated website usage metrics (page views, visit duration, referral sources). Vercel Analytics is privacy-focused and GDPR-compliant — it does not use cookies, does not collect personally identifiable information or IP addresses, and does not track users across sites.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside of your country of residence, including the United States, where some of our third-party service providers (including AI providers and hosting infrastructure) are located.

For transfers of personal data from the EEA, UK, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards including:

• Standard Contractual Clauses (SCCs): As approved by the European Commission (Decision 2021/914), to ensure that your data receives an equivalent level of protection when transferred internationally.
• Adequacy decisions: Where the European Commission, UK Secretary of State, or Swiss Federal Council has determined that the receiving country provides adequate data protection.
• Supplementary measures: Including encryption in transit and at rest, access controls, and contractual obligations with our service providers.

You may request a copy of the safeguards we have in place by contacting us at the address below.

11. Data Retention and Deletion

We retain your data for as long as your account is active and as necessary to provide you with our services. Specific retention periods are as follows:

• Account and resume data: Retained for the duration of your active account, including resume builder data and job application tracker data. Deleted within 30 days of account deletion request.
• Tailoring history: Retained for the duration of your active account to enable review and reuse of past results.
• Cover letter and interview preparation outputs: Retained for the duration of your account. They are deleted within 30 days of account deletion.
• ATS simulation data: For unauthenticated users, no data is retained — analysis is performed in-memory and discarded immediately. For authenticated users, ATS simulation results are cached for up to 7 days to allow users to review their results, after which they are automatically deleted.
• Feedback and edit tracking data: Retained for up to 24 months after collection. After this period, the data is either deleted or permanently anonymized so that it can no longer be linked to your account.
• Country selection data: Not stored permanently. Retained only for the duration of the processing session.
• Payment records: Retained as required by applicable tax and financial regulations (typically 7 years).
• Analytics data: Vercel Analytics data is aggregated and anonymized and does not constitute personal data.
• Chrome extension local data: Resume text synced to chrome.storage.local is stored on your device only and is removed when you uninstall the extension or clear extension data.

You may request deletion of your account and all associated data at any time by contacting us. Upon account deletion, we will remove your personal data from our systems within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

12. Chrome Extension

Our optional Chrome extension enhances the Resuvolt experience by reading job description content from supported job platforms (LinkedIn, Indeed, and Glassdoor). The extension:

• Reads job posting content only on supported job platform pages and only when you actively use the extension.
• Stores authentication tokens in your browser's local storage (chrome.storage.local) to keep you signed in. These tokens remain on your device and are not shared with third parties.
• Sends extracted job description text to our servers for AI processing. No other page content is collected.
• Syncs your latest master resume to local storage (chrome.storage.local) for instant keyword matching against job descriptions. This matching is performed entirely on your device.
• Can save job listings directly to your Resuvolt job application tracker via our API.
• Job data extracted from LinkedIn, Indeed, and Glassdoor is processed locally and only transmitted to our servers when you explicitly choose to tailor your resume or save a job.

You can revoke the extension's permissions or uninstall it at any time through your browser settings.

13. Cookies and Local Storage

We use essential cookies to manage authentication sessions and maintain your login state. These cookies are necessary for the service to function and cannot be disabled. We do not use third-party tracking cookies or advertising cookies.

Your browser's localStorage is used to store your language preference, country selection, review prompt status, and anonymized usage counts so these persist between visits. This data remains on your device and is not transmitted to our servers. Our Chrome extension uses chrome.storage.local to store authentication tokens on your device.

Vercel Analytics: Our analytics solution does not use cookies or any form of persistent client-side storage. All data collected is anonymous and aggregated at the server level.

14. Your Rights (GDPR Articles 15-22)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under applicable data protection law:

• Right of access (Article 15): Request a copy of the personal data we hold about you, including any stored feedback ratings, edit tracking records, and AI input detection results.
• Right to rectification (Article 16): Request correction of inaccurate or incomplete personal data.
• Right to erasure (Article 17): Request deletion of your personal data, including all feedback ratings and edit tracking data associated with your account.
• Right to restriction of processing (Article 18): Request that we limit how we use your data in certain circumstances.
• Right to data portability (Article 20): Receive your data in a structured, commonly used, machine-readable format (e.g., your stored resume content and tailoring history), and transmit that data to another controller.
• Right to object (Article 21): Object to processing of your data based on legitimate interests, including service improvement and analytics. Where you object, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
• Rights related to automated decision-making (Article 22): Our AI tailoring produces suggestions for your review — no fully automated decisions with legal or similarly significant effects are made without your input.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact us at domantas.kazl1@gmail.com. We will respond to your request within 30 days, as required by applicable law. If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (see Section 15 below).

15. Country-Specific Provisions

Resuvolt's services are available in 24 countries. Data processing complies with the GDPR (EU/EEA), UK GDPR, Swiss FADP, and applicable local data protection laws. In addition to the general GDPR rights described above, the following provisions apply depending on your location:

European Economic Area (EEA)

If you are located in any EEA member state, your data is processed in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR). You have the right to lodge a complaint with your national data protection supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu.

United Kingdom

If you are located in the United Kingdom, your data is processed in compliance with the UK General Data Protection Regulation (UK GDPR), as retained and amended under the Data Protection Act 2018 following the UK's withdrawal from the European Union. Your rights under UK GDPR mirror those described in Section 14. You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Switzerland

If you are located in Switzerland, your data is processed in compliance with the Swiss Federal Act on Data Protection (FADP/nDSG), as revised and effective from September 1, 2023. The revised FADP aligns closely with the GDPR and provides you with equivalent data subject rights. You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.

Norway, Liechtenstein, and Iceland (EEA EFTA States)

If you are located in Norway, Liechtenstein, or Iceland, the GDPR applies to you through the EEA Agreement. You have the same rights as EEA residents described in Section 14 and may lodge complaints with your respective national data protection authority.

Monaco

If you are located in Monaco, your data is processed in compliance with Monaco's Act No. 1.165 on the Protection of Personal Information, as amended. Your rights under this framework are substantively similar to those described in Section 14.

All Other Jurisdictions

Regardless of your location, we are committed to protecting your personal data and providing you with the rights described in this policy. If your jurisdiction provides additional data protection rights, we will honour those rights to the extent required by applicable law.

16. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised date. Where required by applicable law, we will notify you directly (e.g., by email) of significant changes to how we process your personal data.

17. Contact Us and Privacy Inquiries

If you have questions about this privacy policy, wish to exercise your data protection rights, or have any concerns about how we handle your personal data, please contact us at domantas.kazl1@gmail.com.

This email address serves as the designated point of contact for all privacy inquiries, including requests to exercise your rights under the GDPR, UK GDPR, Swiss FADP, or any other applicable data protection legislation. We aim to respond to all data protection requests within 30 days of receipt.

If you believe that we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority as described in Section 15.