Last updated: January 2025
WhichResume ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume building service.
This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.
Payment card information is collected and processed directly by Stripe, our payment processor. We never store full payment card details on our servers. We only retain your Stripe customer ID for subscription management.
Sensitive personal information is protected:
This privacy enhancement means your most sensitive contact information never leaves your device and cannot be accessed even in the unlikely event of a data breach.
We use collected information to:
We use the following third-party service providers who may process your data:
Better Auth - Authentication services
Google OAuth - Social login
Google Privacy Policy →Stripe - Payment and subscription management (PCI DSS compliant)
Stripe Privacy Policy →PostHog - Product analytics
PostHog Privacy Policy →Sentry - Error monitoring
Sentry Privacy Policy →Upstash Redis - Rate limiting and caching
Upstash Privacy Policy →Vercel Blob Storage - File storage
Vercel Privacy Policy →To exercise any of these rights, contact us through our Contact Form or email us. We will respond within 30 days (GDPR) or 45 days (CCPA).
We retain your data for as long as your account is active or as needed to provide services. Specifically:
After account deletion, we permanently delete your personal data within 30 days, except where retention is required by law.
We implement industry-standard security measures to protect your data:
While we strive to protect your data, no method of transmission over the internet is 100% secure. Use our Service at your own risk.
Our Service is not intended for children under 13 (COPPA compliance). We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately, and we will delete it.
Your data may be transferred to and processed in countries other than your own. These countries may have different data protection laws. We ensure appropriate safeguards are in place for international transfers, including:
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last Updated" date at the top indicates when the policy was last revised.
Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.
For privacy-related questions, data requests, or concerns, please contact us through our Contact Form.
For GDPR-related inquiries, please include "GDPR Request" in your subject line. For CCPA-related inquiries, please include "CCPA Request" in your subject line.
Your Privacy Matters: We are committed to protecting your privacy and being transparent about our data practices. If you have any questions or concerns, please don't hesitate to reach out.