Privacy Policy
Effective date: May 10, 2026 · Applies to: RESUME.AI (operated by PRPL 7 Inc.)
1. Who we are
RESUME.AI is a job-search platform operated by PRPL 7 Inc., a corporation incorporated under Canadian federal law. We help job seekers optimize resumes, prepare for interviews, and manage their job search pipeline using artificial intelligence.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles.
Questions or requests can be sent to support@launchresumeai.com.
2. Information we collect
We collect information you provide directly and information generated by your use of the service.
2a. Information you provide
- Account information — email address and password when you register.
- Resume content — the PDF or DOCX files you upload; parsed text extracted from those files.
- Job descriptions — the text you paste or import when tailoring a resume or scoring an application.
- Profile data — work history, skills, certifications, and other career details we extract from your resume and store to power future tailoring (your “diarized profile”).
- Sensitive vault data — personal identifiers such as address, phone number, and social insurance number that you optionally store in our encrypted vault for auto-filling job applications. These fields are encrypted at rest with a key derived from your session and are never sent to third-party AI systems.
- Payment information — billing is handled by our payment processor; we do not store full card numbers on our servers.
2b. Information generated automatically
- IP address and approximate location derived from IP.
- Browser type, operating system, and device identifiers.
- Pages visited, features used, and timestamps of activity.
- Error logs and performance metrics.
3. Why we collect it — purposes
We collect and use your information only for the purposes for which you provide it or that are reasonably necessary to deliver the service:
- Creating and authenticating your account.
- Tailoring your resume to specific job descriptions using AI.
- Generating cover letters, interview prep materials, and follow-up emails.
- Scoring your application fit before you apply.
- Populating job application forms with your stored profile data.
- Tracking your job search pipeline (boards, stages, analytics).
- Analyzing rejection patterns to surface actionable improvements.
- Processing payments for paid subscription tiers.
- Sending transactional emails (receipts, password resets, account notices).
- Improving the service — identifying bugs, monitoring performance, and refining AI outputs.
- Complying with legal obligations.
We do not use your resume content or job application data to train general-purpose AI models, sell to advertisers, or share with prospective employers without your explicit action.
4. Consent
By creating an account and using RESUME.AI, you consent to the collection, use, and disclosure of your personal information as described in this policy. Where we collect sensitive information (such as vault data), we rely on your express consent at the point of collection.
You may withdraw consent at any time by closing your account (see Section 8). Withdrawal of consent may prevent us from providing the service to you.
5. How we share your information
We do not sell your personal information. We share it only in these circumstances:
5a. Service providers (sub-processors)
We use the following third-party services to operate the platform. Each is bound by data processing terms:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication & database hosting | Account info, all stored user data |
| Vercel | Application hosting & edge delivery | Request logs, IP addresses |
| Upstash | Session caching (Redis) | Temporary session tokens |
| Anthropic | AI resume tailoring & generation | Resume text, job descriptions — not vault data |
| Payment processor | Subscription billing | Payment card data (not stored by us) |
5b. Legal requirements
We may disclose personal information if required by law, court order, or government authority, or when necessary to protect the safety of our users or the public.
5c. Business transfers
If PRPL 7 Inc. is acquired, merged, or sells its assets, your personal information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.
6. Data retention
We retain your personal information for as long as your account is active or as needed to provide the service. Specifically:
- Account data — retained until you close your account.
- Resume and profile data — retained until you delete it or close your account.
- Vault data — deleted immediately upon your request or account closure.
- Payment records — retained for 7 years to comply with Canadian tax law.
- Server logs — retained for up to 90 days for security and debugging.
After account closure, we delete or anonymize your personal information within 30 days, except where a longer retention period is required by law.
7. How we protect your information
- All data is transmitted over TLS (HTTPS).
- Databases are encrypted at rest.
- Vault fields are encrypted with a session-derived key; we cannot read them without your authenticated session.
- Access to production systems is restricted to authorized personnel.
- We do not permanently store resume files — uploaded files are parsed and the binary is discarded after processing.
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@launchresumeai.com.
8. Your rights
Under PIPEDA, you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — request that inaccurate or incomplete information be corrected.
- Withdrawal of consent — stop our processing of your data, subject to legal or contractual restrictions.
- Deletion — request deletion of your account and associated personal information.
- Complaint — file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.
To exercise any of these rights, email support@launchresumeai.com with the subject line “Privacy Request”. We will respond within 30 days.
9. Cookies and tracking
We use session cookies set by Supabase to authenticate your session. We do not use third-party advertising cookies or cross-site tracking technologies. Analytics (if any) are collected in aggregate and not linked to identifiable individuals.
10. International data transfers
Some of our service providers (including Supabase and Anthropic) store or process data in the United States. By using RESUME.AI, you acknowledge that your personal information may be transferred to, stored in, and processed in the US, which may have different data protection laws than Canada. We ensure all sub-processors maintain appropriate contractual protections.
11. Children
RESUME.AI is not directed at individuals under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us with their information, please contact us and we will delete it promptly.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top and notify you by email or in-app notice if the changes are material. Continued use of the service after the notice period constitutes acceptance of the revised policy.
13. Contact us
PRPL 7 Inc. is the organization responsible for the personal information under its control. For any privacy-related questions or requests: