This Privacy Policy explains what personal information Handmade Resume ("we", "us", "our"), operated by Handmade Resume, collects when you use the service, why we collect it, and the choices you have. It applies to the handmaderesume.com website and the applications, tools, and documents delivered through it (together, the "Service"). It does not cover third-party sites we link to, which have their own policies.
Information we process
We process the following categories of information, only to the extent needed to provide the Service:
- Career content you provide: resume sources you upload, the career record you review and approve, job descriptions, application notes, and the resumes and cover letters we generate for you.
- Account and authentication data: your name, email address, and sign-in credentials, handled through our authentication provider. We do not store your password.
- Billing data: for paid features, our payments provider processes your payment details and returns a limited record (such as a transaction reference and plan status). We do not store full payment card numbers.
- Technical and usage data: limited, privacy-configured product and reliability telemetry (for example, page views and error reports). This telemetry is content-free: it is designed and enforced not to contain document text, employer names, job descriptions, or contact details.
Contact details such as your name, email address, and phone number are separated from the rest of your content before automated processing and are reinserted deterministically only when your finished documents are rendered. There is one exception, for photographed and scanned resumes, described under Automated document generation below.
How we use your information
We use your information to:
- operate the Service: turning your approved career record and a job description into tailored, format-checked documents;
- maintain your account, process payments, and provide support;
- keep the Service secure, prevent abuse, and diagnose errors; and
- meet legal and record-keeping obligations.
We do not sell your personal information, and we do not use your career content to build advertising or marketing profiles.
Automated document generation
Generating and checking your documents involves automated language processing carried out on specialized, access-controlled model infrastructure operated on our behalf. This processing is constrained to the task, and we have designed it to protect your information:
- direct contact identifiers are removed before any model request and reinserted only at render time. There is one exception we would rather state than gloss over: a photograph or scan of a resume with no text layer is an image, so those details cannot be removed before the page is read. That single transcription request sees the page as printed, under the same zero-retention handling described below; the text it produces is then redacted exactly as a text resume would be, so every later step still sees redacted content only. A file that already has selectable text never takes this path;
- requests are configured to require zero-data-retention handling, so inputs and outputs are not stored by the underlying infrastructure beyond the moment of processing;
- your content is not used to train third-party models; and
- prompts and generated text are not written to our application logs.
These outputs are drafts that you review, edit, and approve. We do not use them to make any decision that produces a legal or similarly significant effect about you; you remain in control of what you submit to an employer.
Legal bases (where GDPR applies)
Where the EU or UK GDPR applies, we rely on these legal bases:
- Performance of a contract: to provide the Service you request;
- Legitimate interests: to secure the Service, prevent fraud, and improve reliability;
- Consent: for optional marketing communications and any non-essential analytics, which you can withdraw at any time; and
- Legal obligation: where the law requires us to retain or disclose information.
Service providers
We share information only with a limited set of vetted service providers ("subprocessors") who help us run the Service, such as hosting, storage, authentication, payments, email delivery, and privacy-configured analytics. Each is bound by contractual confidentiality and data-protection obligations and may process your information only on our instructions. The current list is published on our Subprocessors page. We may also disclose information where required by law or to protect our rights, users, or the public.
International transfers
We and our service providers may process information in countries other than the one you live in. Where such transfers are subject to data-protection law, we rely on appropriate safeguards, such as standard contractual clauses or an equivalent mechanism, to protect your information.
Retention and deletion
We keep information only as long as we need it. If you upload a resume and paste a job description, or choose to carry a builder draft into signup, we hold that information privately while you create your account. After fifteen minutes your browser can no longer add it to an account. You can clear a waiting draft; the upload starter also clears itself when idle. Once added, they become part of your account and are kept under the rules below that already apply to that kind of content. Unclaimed information expires after 24 hours and is removed by the next successful scheduled cleanup. You can delete your original resume sources once you have approved your career record. Career records and saved document versions remain in your account until you delete them; downloadable files have their own retention windows. Files from a free application expire after three days. An active paid plan protects application files, including earlier free files; when paid access ends, those files have a 30-day retention window. A monthly cancellation takes effect at the end of its paid period; a pass ends 30 days after purchase. The product shows each file's expiry date. Master-resume files remain until you delete them or your account. Expired files are removed by scheduled cleanup. Deleting your account revokes access and queues deletion of your records and private files. We may retain a minimal amount of information where the law requires it (for example, billing records) or to resolve disputes, after which it is deleted or anonymized.
Cookies and analytics
We use strictly necessary cookies to sign you in and keep the Service secure. Any product analytics are privacy-configured and content-free; session recording and automatic event capture are disabled. Marketing consent is handled separately and is off by default.
Your rights and choices
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Much of this you can do directly in the product; for anything else, contact us at the address below and we will respond as required by applicable law. If you are in California, you have the right to know, delete, and correct your personal information and to not be discriminated against for exercising those rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Children
The Service is intended for adults in the job market and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you through the Service. Your continued use after an update means you accept the revised policy.
Contact us
Questions about this policy or your information can be sent to support@handmaderesume.com. If you are in the EU or UK and are not satisfied with our response, you may also contact your local data-protection authority.