Last updated: February 15, 2026 · Version 2026-03-1
What changed
Added legal basis disclosures for major processing activities.
Clarified optional analytics categories and consent controls.
Expanded disclosures for Upstash, Gemini processing, and privacy contact routing.
Local + Cloud Storage
Stored locally and synced securely when signed in
No Data Selling
We never sell your information
Your Control
Delete your data anytime
Introduction
Welcome to ResumeZeus ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our resume builder application. This Privacy Policy explains how we collect, use, and protect your information.
Information We Collect
Information You Provide
When you use our resume builder, you may provide personal information including:
Name and contact information (email, phone, address)
Professional experience and employment history
Educational background
Skills, certifications, and achievements
Any other information you choose to include in your resume
Automatically Collected Information
We may collect certain information automatically when you use our service:
Browser type and version
Device type and operating system
Usage patterns and feature interactions (anonymized)
Error logs for debugging purposes
Hashed IP addresses and device fingerprints, used solely for rate limiting and abuse prevention (retained up to 30 days; processed via Upstash)
How We Use Your Information
We use the information we collect to:
Provide and maintain our resume builder service
Generate PDF exports of your resume
Improve our application based on usage patterns
Fix bugs and technical issues
Respond to your inquiries and support requests
Legal Basis for Processing (GDPR Art. 6)
Processing activity
Legal basis
Account creation and authentication
Contract — Art. 6(1)(b)
Resume and cover letter storage
Contract — Art. 6(1)(b)
AI content generation
Contract — Art. 6(1)(b)
Vercel Analytics (page views)
Consent — Art. 6(1)(a)
Public resume view/download analytics
Consent — Art. 6(1)(a)
Rate limiting (hashed IP addresses)
Legitimate interest — Art. 6(1)(f)
Abuse prevention signals
Legitimate interest — Art. 6(1)(f)
Error monitoring (Sentry)
Legitimate interest — Art. 6(1)(f)
Data Storage
Storage Model: Resume data is stored locally in your browser and, when you are signed in, in secure cloud storage for sync and recovery.
Local browser storage is used for fast editing and draft persistence
Signed-in accounts sync resume data to cloud storage to support cross-device access
AI features process selected resume and job-description content on our servers
Clearing browser data removes local copies, but cloud-synced data remains in your account
Export Files: When you export your resume (PDF or JSON), the file is generated in your browser and downloaded directly to your device.
Cookies and Tracking
We use minimal cookies and similar technologies:
Essential Cookie: We use rf_cookie_consent to remember your analytics preference
Analytics (Consent-Based): Vercel Analytics and public resume analytics are enabled only after explicit consent
No Advertising Cookies: We do not use cookies for advertising purposes
Consent Control: You can accept, reject, or save per-category preferences from the cookie banner
Data Security
We implement appropriate security measures to protect your information:
HTTPS encryption for all data transmission
Server-side access controls for account data
Regular security updates and monitoring
No storage of sensitive data like passwords on our servers
Your Rights
You have the following rights regarding your data:
Access: View and manage your resume data in-app at any time
Export: Download your data as JSON at any time
Delete: Delete resumes/account data and clear local browser storage
Portability: Export and import your data freely
Third-Party Services
We may use the following third-party services:
Google AI (Gemini): AI features send resume content (experience, skills, job descriptions) to Google's Gemini API for processing. Direct identifiers (name, email, phone, URLs) are stripped before transmission by default. Data is processed under Google's Cloud Data Processing Addendum and is not used to train Google's models.
We keep personal data for as long as your account remains active or as needed to provide the service.
When an account is deleted, account data (profile, resumes, cover letters, public links, username, and related data) is removed through a dedicated server-side deletion flow
Public resume analytics events are retained for up to 30 days and then automatically removed
Pseudonymized anti-abuse signals (hashed IP/device identifiers) are retained for up to 30 days
Temporary anti-abuse blocks expire automatically after 24 hours
Irreversibly anonymized aggregate data may be retained for operational statistics.
Data Controller and Supervisory Authority
The data controller is AXTECH CONSULTING S.R.L., with registered office at București Sectorul 4, Strada Cap. Marin Grigore nr. 18, Parter, Bloc 4, Scara 1, Ap. 7.
If you believe your GDPR rights have been infringed, you may lodge a complaint with the Romanian supervisory authority:
ANSPDCP — Romanian National Supervisory Authority for Personal Data Processing: www.dataprotection.ro
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and bumping the policy version when the change is material.