Privacy Policy

This Privacy Policy explains what personal information Resumonster ("we", "us", "our") collects, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to resumonster.ai and the Resumonster web app (the "Service"). We have written it in plain language so it is easy to follow.

Resumonster is a resume-tailoring service. You bring the resume and career history you already have, and we help you tailor them to specific job postings using artificial intelligence. Resumonster is operated by DATAFRUIT LLC, based in California, United States.

For any privacy question or request, email us at hello@resumonster.ai.

We collect the information below. You decide what to give us, and much of it is optional until you choose to use a feature that needs it.

• Account information. Your name and email address, a password (stored only as a salted hash) or your Google sign-in identifier if you sign in with Google, your email-verification status, and session data.
• Resume and career information. The resume file you upload (.docx or .pdf), the career history you paste in, your structured profile, and any personas you save. This often includes your name, contact details, work history, and education. You decide what to include.
• Job posting information. The job-post links and pasted job descriptions you submit so we can tailor your resume to them.
• Generated content. The tailored resumes we produce for you, and the underlying content behind them.
• Usage and cost data. Internal records of how much AI processing your account uses and its estimated cost, which we use to run the Service sustainably.
• Payment information. Your plan and subscription status and a Stripe customer identifier. Your card number is sent directly to Stripe and is never stored on our servers.
• Technical information. A session cookie to keep you signed in, your IP address (used for rate limiting and abuse prevention), and, on our contact form, a bot-protection signal from Cloudflare Turnstile.

Please do not include sensitive personal information you do not want processed (for example health, religion, ethnicity, or similar details) in your resume or career history. We do not ask for it, and we do not need it to tailor your resume.

We use your information only to run Resumonster. For users in regions with data-protection laws such as the GDPR, the legal basis for each use is shown in brackets.

• To create and run your account and to provide the core service, including tailoring your resume (this is a contract you enter into with us to receive the Service).
• To process payments and manage your subscription (performance of our contract with you).
• To send you transactional email such as verification, receipts, and important service notices (performance of our contract with you).
• To keep the Service secure and available, including rate limiting, bot protection, and fraud and abuse prevention (our legitimate interest in protecting the Service and our users).
• To understand and manage AI usage and cost so we can run the business sustainably (our legitimate interest).
• To prevent fraud and to resolve disputes, including keeping a minimal record after account deletion as described in Section 7 (our legitimate interest and, where relevant, to establish, exercise, or defend legal claims).

We do not use your resumes or career history to build advertising profiles, and we do not use them to train our own AI models.

Resumonster uses AI to tailor your resume. When you ask us to generate a tailored resume, we send the career information you provided and the job posting you selected to our AI provider, Anthropic (the maker of Claude), which processes them to produce your tailored document. We only send what is needed to perform this task, and only when you choose to generate a resume.

Anthropic acts as our service provider for this processing. Under Anthropic's commercial terms, it does not use data submitted through its API to train its models by default, and it deletes API inputs and outputs within about 30 days, except where content is flagged by its automated trust-and-safety systems, in which case it may be retained for longer. You can read Anthropic's terms and privacy information at anthropic.com.

The AI helps you draft and tailor your own resume. It does not make any automated decision about you that produces legal or similarly significant effects. You review, edit, and decide what to do with everything it produces.

We share your information only with the service providers we rely on to run Resumonster, and only so they can perform their service for us, under contracts that require them to protect your information and not use it for their own purposes.

• Anthropic: AI processing that generates your tailored resume. Receives your career content and the job posting when you generate a resume.
• Stripe: Payments and subscriptions. Your card details go directly to Stripe, a PCI DSS Level 1 certified provider; we keep only identifiers such as your customer ID and subscription status. Stripe also acts as an independent controller for fraud prevention and its own legal compliance.
• Resend: Transactional email delivery. Receives the recipient email address and the message contents.
• Supabase: Database hosting. Stores your account and application data, encrypted in transit and at rest.
• Cloudflare: Bot protection (Turnstile) on our contact form. Processes technical signals such as your IP address, a TLS fingerprint, and your browser's user-agent. It does not use cookies and, per Cloudflare, is not used to identify, profile, or advertise to you.
• Google: Optional "Sign in with Google". If you use it, Google shares your name, email address, profile picture, and a unique account identifier with us. We do not receive your Google password or access to your other Google data.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We do not run ads or ad tracking. We may also disclose information if the law requires it (for example a valid legal request), or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this policy.

We use only essential cookies. A session cookie keeps you signed in, and Cloudflare Turnstile helps us tell real users from bots on our contact form. We do not use advertising cookies, analytics cookies, or third-party trackers. Because these cookies are strictly necessary to run the Service and are not used to track you, we do not show a cookie consent banner.

While your account is active, we keep the information described above so we can provide the Service.

When you delete your account, we delete your resumes, career history, personas, job postings, and generated resumes, including the underlying files and records, and we cancel any active subscription right away.

We keep two limited things after deletion. First, a record of AI usage and cost with your name and email removed, which we use for accounting and which we do not try to link back to you. Second, a minimal record of your name and email address, which we keep to prevent fraud and abuse, to resolve billing or legal disputes, and to help recover an account that was deleted by mistake. We keep this minimal record only for as long as necessary for those purposes.

Some information held by our providers (for example Stripe payment records) is kept under their own retention practices, which we do not fully control. Copies of deleted data may also remain briefly in routine encrypted backups before they age out.

We protect your information using standard security measures. Connections to Resumonster are encrypted in transit using HTTPS, passwords are stored only as salted hashes, our database host encrypts data at rest, and access to production systems is limited to those who need it. No online service can be completely secure, so we cannot promise absolute security, but we work to protect your information and to respond quickly if a problem occurs. Please use a strong, unique password.

Depending on where you live, you have rights over your personal information. If you are in the European Economic Area, the United Kingdom, or Switzerland, these include the rights to access, correct, delete, restrict, and port your information, to object to certain processing, and to withdraw consent where we rely on it. If you are a California resident, these include the rights to know, delete, and correct your personal information, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be treated differently for exercising your rights.

The right to opt out of the sale or sharing of personal information does not require any action here, because we do not sell or share your personal information.

You can delete your account and its data at any time from the billing settings in the app. To exercise any other right, email us at hello@resumonster.ai. To protect your information, we will take reasonable steps to verify your identity before we act, usually by confirming control of your account email. We will not deny you service or treat you differently for exercising your privacy rights, and we will respond within the timeframes required by law.

Resumonster is operated in the United States, and our service providers are also based in the United States. If you use Resumonster from the European Economic Area, the United Kingdom, or Switzerland, your information will be transferred to and processed in the United States. Where we transfer personal information out of these regions, we rely on legal transfer mechanisms such as the EU-US Data Privacy Framework, where a provider is certified, or Standard Contractual Clauses approved by the European Commission.

Resumonster is intended for adults. You must be at least 18 years old to use it. We do not knowingly collect personal information from children. If you believe a child has used Resumonster, contact us and we will delete the information.

If a data breach affects your personal information, we will notify the relevant authorities and, where the law requires it, notify you, within the timeframes set by applicable law.

We may update this policy from time to time. When we do, we will change the date at the top of this page. If the changes are significant, we will give you notice, for example by email or a notice in the app. Your continued use of Resumonster after an update means you accept the revised policy. See also our Terms of Service.

For any privacy question or request, email hello@resumonster.ai. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority, though we ask that you contact us first so we can try to resolve your concern.