Build My Resume
Back to home

Privacy Policy

Last Updated: September 23, 2026

At ResumeToys (resume.toys), we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, store, process, and protect your information when you use our website, mobile application, resume builder, ATS diagnostic checker, and related services.

If you have any questions or require additional information about our privacy practices, please contact us at team@resume.toys.

1. Consent & Scope

By accessing or using ResumeToys (including our web platform and Android mobile application), you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information in accordance with its terms.

2. Information We Collect

We collect information that you directly provide when creating an account, constructing resumes, or purchasing services:

  • Account & Profile Information: When you register (via email/password or Google OAuth), we collect your name, email address, and profile picture/avatar.
  • Resume & Career Data: To generate, format, and store your resumes, we store the content you input, including work experience, job titles, employer names, employment dates, education history, skills, certifications, project descriptions, and optional contact details (e.g., phone number, location, portfolio links).
  • Uploaded Files & Photos: If you upload an existing PDF resume to parse, our server parses the text into structured resume fields in memory. If you choose to upload a profile photo for your resume, the image is stored in our secure object storage.
  • Transaction & Purchase Records: When you purchase a Single Resume unlock, Pro subscription, or AI credit pack, we record transaction metadata such as order IDs, product identifiers, currency, amount, and purchase timestamps. We do not collect or store credit card numbers, CVVs, or bank account credentials directly. All payment details are processed through authorized payment processors.
  • User Feedback & Bug Reports: When you submit in-app feedback, bug reports, or feature requests via Settings, we collect your message text, category, subject, page route context, and safe diagnostic technical details (platform, app version, screen dimensions, and browser/OS user-agent information) solely to investigate and resolve issues, provide customer support, and improve the product.

3. How We Use Your Information

We use collected information solely for legitimate operational purposes:

  • Providing, maintaining, and updating the resume builder and document editor.
  • Rendering and generating downloadable vector PDF resumes.
  • Performing ATS compatibility checks and career profile management.
  • Authenticating user sessions and safeguarding account security.
  • Fulfilling digital purchases, tracking AI credit balances, and preventing fraud.
  • Responding to support requests, user feedback, and processing account deletion requests.

4. Artificial Intelligence (AI) Processing & Sub-Processors

ResumeToys offers optional AI-assisted career features, such as bullet point rewriting, professional summary optimization, ATS resume scoring, job match analysis, project description generation, and resume tailoring.

  • Data Sent for AI Processing: Only the specific text required to fulfill the feature you invoke is sent (e.g., the bullet point being rewritten, the summary text, or the resume text and target job description being compared). Account credentials, passwords, and billing information are never sent to AI processing services.
  • Primary AI Sub-Processor: AI features are primarily powered by Google Gemini models hosted on Google AI infrastructure. In some workflows, model routing or lightweight generation may utilize OpenRouter or Groq.
  • Usage Logging & Performance Caching: To manage metered credit balances and prevent abuse, we record technical telemetry (user ID, feature key, model name, token count, and credits charged) in our database. To prevent redundant invocations and extra credit deductions for identical inputs, generated outputs may be cached against a cryptographic hash of the prompt.
  • In-App AI Content Reporting: In accordance with Google Play Generative AI policies, our application provides an in-app reporting mechanism on AI-generated cards. If you report objectionable or problematic AI output, the flagged snippet and your report reason are stored securely to allow safety and compliance review.
  • No Sale of Personal Data: We do not sell your resume text or personal information to third parties, nor do we share your resume text with third parties for cross-context behavioral advertising.

5. Payment Processors & Digital Goods

ResumeToys uses dedicated payment processors depending on the platform you use:

  • Google Play In-App Billing (Android Application): For users on our Android app, all digital purchases (including subscriptions, single resume unlocks, and credit packs) are handled exclusively via Google Play In-App Billing. Google Play collects and processes your payment details in accordance with Google's Privacy Policy. ResumeToys receives only verification tokens, order IDs, and purchase timestamps to fulfill your digital entitlements.
  • Razorpay (Web Checkout): For purchases made through our web application, transactions are processed securely via Razorpay in compliance with PCI-DSS and applicable financial regulations. ResumeToys receives order and payment identifiers to activate your purchase; we never handle or store raw card or banking credentials.

6. Infrastructure & Hosting (Supabase)

Our backend database, authentication system, and file storage are hosted on Supabase. Data is stored in secure cloud databases configured with PostgreSQL Row Level Security (RLS), ensuring that users can only query and modify their own personal documents and profile records.

7. Analytics & Tracking

ResumeToys does not employ third-party advertising trackers, social media tracking pixels, or cross-app analytics SDKs. We use only lightweight, internal client/server event logging to monitor core app stability and conversion funnels (such as registration and export completion) without profiling users for marketing.

8. Data Security

We implement industry-standard technical measures to protect your information:

  • All web and API traffic is encrypted in transit using Transport Layer Security (TLS / HTTPS).
  • Database access is enforced through strict Row Level Security (RLS) policies tied to authenticated user IDs.
  • Sensitive administrative operations and service keys are isolated to server-side environments and never exposed to client applications.

9. Account & Data Deletion

You maintain full control over your data and may permanently delete your account and all associated documents at any time:

  • In-App Deletion: Sign in, navigate to Settings, scroll to the Danger Zone, and click Delete Account.
  • Web Deletion Page: Visit resume.toys/delete-account for detailed instructions and assistance.

Upon deletion, your account profile, resumes, career profile records, ATS scan history, and credit records are permanently purged from our primary database systems.

10. Your Rights (GDPR & CCPA)

Depending on your location, you may have rights under applicable data protection laws (such as GDPR or CCPA):

  • Access & Portability: You may request copies of your personal data and export your resumes as PDF documents.
  • Rectification: You may update or correct your personal and resume data at any time directly through the editor.
  • Erasure: You may delete your account and data at any time as described above.
  • Non-Discrimination: We do not sell consumer personal data, nor do we discriminate against users who exercise their privacy rights.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out to us at:

ResumeToys Support Team
Email: team@resume.toys
Website: https://resume.toys