Privacy Policy

1. Introduction

Welcome to ResuX ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy applies to all information collected through our website, application, and any related services (collectively, the "Services").

ResuX is an AI-powered resume builder and optimization tool designed to help users create ATS-friendly resumes. By accessing or using our Services, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products, or otherwise contact us.

A. Personal Information Provided by You

• Account Credentials: Names, email addresses, and passwords.
• Resume Data: When you use our AI tools, we collect the professional data you upload or input, including work history, educational background, skills, certifications, and contact details included in your resume.
• Waitlist Data: If you join our waitlist, we collect your email address to notify you when features become available.

B. Information Collected via Third-Party Authentication

We allow you to sign up and log in using third-party social account details (Google OAuth, GitHub OAuth).

If you choose to link your account with us, we collect your name and email address associated with that third-party account. We do not control, and are not responsible for, other uses of your personal information by these third-party providers.

C. Automatically Collected Usage Data

When you visit or use our Services, we automatically collect certain information that does not reveal your specific identity but may include:

• IP address
• Browser and device characteristics
• Operating system
• Referrer URLs
• Device name
• Country/Location

3. How We Use Your Information

We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent. We use the information we collect or receive:

• To facilitate account creation and logon process: We use Supabase to manage secure sessions and authentication.
• To provide AI Analysis: We process your resume text to generate suggestions, optimize content for Applicant Tracking Systems (ATS), and improve grammar/phrasing.
• To send administrative information: We may send you service, support, and administrative emails, such as updates regarding your account or changes to our terms.
• To protect our Services: We may use your information as part of our efforts to keep our Services safe and secure (e.g., fraud monitoring).

4. How We Share Your Information

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.

A. Third-Party AI Providers

To provide our core resume optimization features, we transmit user-submitted text (e.g., resume content) to third-party AI service providers, including but not limited to OpenAI and Google Gemini.

B. Service Providers & Infrastructure

We may share your data with third-party vendors who perform services for us:

• Supabase: For database hosting, authentication management, and data storage.
• Vercel: For web hosting and infrastructure.

C. Legal Obligations

We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

5. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law.

When you delete your account, we will delete or anonymize your information, subject to the retention of backup copies for a limited period to ensure data integrity.

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process.

• Authentication: We use Supabase to manage secure authentication (including OAuth flows).
• Encryption: Data is encrypted in transit (SSL/TLS) and at rest where supported by our providers.

Disclaimer: However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

7. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies (like local storage) to access or store information.

• Session Management: We use cookies/local storage to keep you logged in and manage your session state via Supabase.
• Preferences: We may use cookies to remember your settings.

8. International Data Transfers

Our primary operations are based in Malaysia. However, our third-party service providers (Vercel, Supabase, AI providers) may operate servers in the United States, Europe, or other regions. By using ResuX, you acknowledge that your information may be transferred to, stored, and processed in these jurisdictions.

9. Your Privacy Rights

10. Children's Privacy

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services.

11. Updates to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.