Privacy Policy

Read our Privacy Policy to understand how ResumeUp.AI protects your data while using our AI-powered resume tools.

Last Updated On: September 30, 2026

1. Introduction

This Privacy Policy explains how ResumeUp.AI (“ResumeUp”, “we”, “us”, or “our”), accessible at https://resumeup.ai, collects, uses, shares, and protects your personal information when you use our website, applications, and AI-powered resume tools, including when you connect ResumeUp to an AI assistant (such as ChatGPT or Claude) through our integration.

By using ResumeUp, you agree to the practices described in this policy. If you do not agree, please do not use the service.

2. Information We Collect

We collect the following categories of personal information:

  • Account and identity data: your name, email address, and authentication identifiers used to create and secure your account.

  • Resume and document content: what you create, upload, or edit in ResumeUp, including your resume details (work history, education, skills, contact info), cover letters, uploaded files, and job descriptions you paste in. This is the core data needed to provide the service.

  • LinkedIn import data (only if you use import): profile details we retrieve from your LinkedIn profile, through our data-enrichment provider, to pre-fill your resume.

  • Payment and billing data: we use third-party payment processors to handle payments. We do not store your full payment card number; we retain limited billing metadata such as your plan, subscription status, credit usage, and transaction identifiers.

  • AI-assistant connection data (only if you connect an assistant): the access tokens and API keys that let a connected assistant (such as ChatGPT or Claude) act on your account, and the time they were last used. API keys are stored hashed and encrypted.

  • Usage, log, and device data: information generated as you use the service, such as log data, feature-usage events, timestamps, IP address, and browser/device information, collected via our analytics and monitoring providers.

  • Voice and mock-interview data (only if you use that feature): audio and transcripts processed by voice-AI providers to run practice interviews.

  • Cookies and similar technologies: used to keep you signed in, remember preferences, and measure and improve the service (see Section 10).

3. How We Use Your Information (Purposes)

We use the information above to:

  • Provide the service: create, store, render, edit, and export your resumes and related documents.

  • Power AI features: generate, rewrite, tailor, translate, score/check, and otherwise process your resume content using artificial-intelligence models. Using these features requires sending the relevant resume content to our AI provider (see Sections 4 and 5).

  • Manage your account: authentication, support, and account administration.

  • Process payments: manage subscriptions, credits, and billing through our payment processors.

  • Improve and secure the service: analytics, debugging, performance monitoring, fraud prevention, and abuse protection.

  • Communicate with you: service, security, and (where permitted) product messages.

  • Comply with law: meet legal obligations and enforce our terms.

We do not use your resume content to train our own general-purpose models, and our AI provider does not use your content to train its models by default (see Section 5).

4. AI Features and AI-Assistant (ChatGPT / MCP) Integration

ResumeUp offers AI-powered features and an integration that lets you connect your ResumeUp account to third-party AI assistants (such as ChatGPT or Claude) via the Model Context Protocol (MCP).

What the integration can do. When you connect ResumeUp to an AI assistant, the assistant can, at your direction, use tools that:

  • list your resumes and the available templates,

  • read a resume or a single section of it,

  • create a new resume,

  • update, rewrite, or delete sections and entries,

  • reorder sections and entries,

  • change a resume’s template,

  • tailor a resume to a job description (this creates a new copy and leaves your original unchanged), and

  • export a resume as a PDF.

What goes in and what comes back. The assistant sends us things like a resume ID, the text you or the assistant want to add or change, and any job description you provide. We send back resume content (for example your contact details, work history, education, and skills), confirmation of changes, and, for PDF export, a download link that expires after 10 minutes.

What this means for your data. To carry out these actions, your resume content is processed by ResumeUp and by the AI assistant you connect. For example, when you use ResumeUp inside ChatGPT, your requests and the resume content involved are processed by OpenAI under OpenAI’s own privacy policy, in addition to ours. Rewriting and tailoring also send the relevant resume content to our AI provider listed in Section 5. Edits made through an assistant can change a resume that you have published on a public share link. These AI tools use your plan or credits in the same way as the same features in the app.

Your control. The integration only acts on your own account and only when you ask it to. You can disconnect ResumeUp from any AI assistant at any time from that assistant’s connector settings, which stops further access.

5. How We Share Your Information (Categories of Recipients)

We do not sell your personal data, and we do not share it for third-party advertising. We share personal information only as described here.

We use trusted third-party service providers (“sub-processors”) that process data on our behalf, under contracts that require them to protect it and use it only to provide services to us. By category (providers in parentheses):

  • AI / large-language-model provider: for generating, rewriting, tailoring, translating, and analyzing resume content (OpenAI, used directly and through the Vercel AI Gateway). Resume content you process with AI features is sent to this provider.

  • Cloud hosting, database, and file storage (Amazon Web Services; Supabase).

  • Payment processors (Stripe, Lemon Squeezy).

  • Analytics and monitoring (PostHog, Better Stack).

  • Content delivery and security (Cloudflare).

  • LinkedIn import / data enrichment, only if you use import (Apify).

  • Voice-AI providers, only if you use mock interviews (Deepgram, ElevenLabs).

  • AI-assistant platforms you choose to connect (for example, OpenAI for ChatGPT, Anthropic for Claude), as described in Section 4.

We may also disclose information: (a) to comply with law, legal process, or valid government requests; (b) to protect the rights, safety, and security of ResumeUp, our users, or the public; and (c) in connection with a merger, acquisition, or sale of assets, in which case we will notify you and this policy will continue to apply to your information.

If you access ResumeUp through a white-label or agency partner, your data is processed within that partner’s tenant for the purpose of providing you the service.

6. Data We Do Not Collect (Restricted Data)

We do not intentionally collect, solicit, or process:

  • full payment card data subject to PCI DSS (payments are handled by PCI-compliant processors; we never receive or store your full card number);

  • protected health information (PHI);

  • government identifiers such as Social Security or national ID numbers; or

  • authentication secrets such as passwords, API keys, or one-time codes, other than the ResumeUp access tokens and keys described in Section 2.

Please do not include any of the above in your resumes or other content. If you do, you are responsible for that inclusion, and we will treat it under this policy.

7. Sensitive Information

A resume is content you control, and it may contain information considered sensitive in some jurisdictions (for example, nationality). Please include only what you want in your resume, and avoid special-category data (such as health, religion, or political views) unless it is necessary for your purpose. We process the content you provide solely to deliver the features you use.

8. Data Retention

We keep personal information only as long as needed for the purposes described here:

  • Account and resume/document data: retained while your account is active. If you delete a resume, it is removed from active systems promptly. If you ask us to delete your account or data, we respond within 48 hours, start the deletion within 48 hours, and complete it within 30 days, except where we must retain some data to comply with law.

  • AI provider: content sent for AI features is processed to return a result; our provider does not use it to train its models by default and retains it only briefly, if at all, for abuse monitoring under its terms.

9. Your Rights and Controls

Depending on your location, you may have the right to access, correct, delete, export (port), or restrict the processing of your personal information, and to object to certain processing or withdraw consent. You can:

  • View, edit, or delete individual resumes and documents directly in the app.

  • Delete your account and associated data by emailing help@resumeup.ai. We will respond within 48 hours and complete the deletion within 30 days.

  • Export your data by contacting us.

  • Disconnect AI assistants (ChatGPT, Claude, etc.) at any time from the assistant’s connector settings.

  • Manage cookies and analytics through your browser and any in-app controls.

To exercise any right, email help@resumeup.ai. We will respond within 48 hours and within the time required by applicable law. We will not discriminate against you for exercising your rights. If you are in the EEA/UK, our processing relies on legal bases including performance of our contract with you, your consent (where required, e.g. for optional analytics), and our legitimate interests; you may also lodge a complaint with your local data-protection authority.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and measure and improve the service through our analytics providers (Section 5). Some analytics data may include identifiers such as IP address, timestamps, and usage events. You can control cookies through your browser settings; disabling some cookies may affect functionality. We do not use your data for cross-site behavioral advertising.

11. International Data Transfers

ResumeUp and our service providers (including our AI provider) may process your information in the United States and other countries whose data-protection laws may differ from yours. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

12. Security

We take reasonable and appropriate technical and organizational measures to protect your information against loss, misuse, and unauthorized access, disclosure, alteration, or destruction. These include encryption in transit, access controls, and hosting with reputable cloud providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Children’s Privacy

Our website is not intended for children, and we do not knowingly collect data from children under the age of 13.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last Updated” date and, for material changes, notify you by email. Your continued use of ResumeUp after an update constitutes acceptance of the revised policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us:

  • Email: help@resumeup.ai

  • Chat support: available in the app

  • Website: https://resumeup.ai

By using ResumeUp, you acknowledge that you have read and understood this Privacy Policy. We are committed to protecting your privacy and the security of your data.