This Privacy Policy explains how Resumie (“we,” “us,” or “our”) processes personal data when you create an account and use the website, dashboard, builders, generators, application tracker, saved documents, feedback tools, and related services.
Who we are and scope
Resumie is the personal information controller for the data described in this policy. This policy is written with reference to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
Questions or privacy requests may be sent to deleonmariaaleana@gmail.com.
Personal data we collect
We collect information you provide, information generated through your use of the Service, and limited technical data needed to operate and protect it.
How and why we use data
- Create and secure your account, authenticate you, and route you to your personal dashboard.
- Save, retrieve, edit, export, email, and delete your documents, prompts, and application records.
- Enforce free-plan limits, prevent abuse, investigate reports, and maintain administrative audit records.
- Respond to support requests, reviews, and bug reports and improve product reliability.
- Send transactional messages you request, such as sign-in or document-delivery emails.
- Comply with legal obligations and protect the rights, safety, and security of users and the Service.
Depending on the context, processing is necessary to provide the Service you request, based on consent, necessary for legitimate operational and security interests, or required by law. We do not require marketing consent to use the core Service.
Storage and retention
Account records and cloud-saved work are stored through Supabase. Document files are kept in a private storage bucket, while related metadata and editable draft data are stored in protected database tables. Some draft-recovery and preference data also stays in your browser.
We retain account content while your account is active or until you delete the item or request account deletion. Feedback, security records, and administrative audit data may be retained longer when reasonably necessary to resolve issues, prevent repeated abuse, maintain accountability, or meet legal obligations. Provider backups may persist for a limited period under the provider’s backup lifecycle.
We aim to remove or anonymize personal data when it is no longer reasonably necessary for the stated purpose, subject to legal, security, fraud-prevention, and dispute-resolution needs.
Service providers and disclosures
We use service providers to operate Resumie, including Supabase for authentication, database, and file storage; hosting and deployment providers; Resend or another configured provider for transactional email; and Upstash Redis where configured for counters, rate limits, or legacy feedback storage.
These providers process data only to deliver their services under their own contractual and privacy obligations. We may also disclose data when required by law, to protect users or the Service, or in connection with a legitimate business transfer subject to appropriate safeguards.
We do not sell personal data. The public registered-user display receives only an aggregate count and does not expose account identities.
Security and access
We use technical and organizational controls intended to protect personal data, including authenticated access, row-level database policies, private file storage, server-only administrative credentials, restricted admin functions, storage limits, and moderation audit records.
Only the account owner can normally access their profile, documents, prompts, and applications. Authorized administration may access information when needed for support, reviews, bug reports, safety, abuse investigations, account enforcement, or legal compliance.
No system is completely secure. If a personal data breach requires notification, we will act in accordance with applicable Philippine law and National Privacy Commission requirements.
Your privacy rights
Subject to applicable law, you may have the right to be informed, object, access your data, correct inaccurate data, request erasure or blocking, receive portable data, claim damages, and file a complaint.
Send requests to deleonmariaaleana@gmail.com. We may need to verify your identity before acting. Some requests may be limited where retention or processing is required by law or necessary for legal claims, security, or another lawful purpose.
You may also review the National Privacy Commission’s data-subject rights guidance or file a complaint with the NPC.
International data transfers
Some service providers may store or process information outside the Philippines. Where personal data is transferred internationally, we remain responsible for using providers and safeguards intended to protect it consistently with applicable requirements.
Age requirement
Resumie is intended for people aged 18 and older. We do not knowingly create accounts for children. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.
Changes to this policy
We may update this policy as Resumie changes. We will update the effective date and provide additional notice when a change materially affects how personal data is handled. Previous versions may be retained for accountability.
Contact
For access, correction, deletion, portability, objection, complaints, or other privacy questions, email deleonmariaaleana@gmail.com. Please do not include passwords or unnecessary sensitive information in your request.