Privacy policy

Last updated 13 October 2026

ResumeGenie writes resumes tailored to each job you apply for, from a record of your experience. This policy says what personal information we hold, why, who else sees it, how long we keep it and what you can do about it. It applies to resumegenie.dev, its MCP server at mcp.resumegenie.dev, and the sign-in pages under them.

Who we are

ResumeGenie is run by Russell Groves, in South Africa. He is the responsible party under South Africa's Protection of Personal Information Act (POPIA), the controller under the EU General Data Protection Regulation (GDPR), and our Information Officer. For anything about your personal information, write to privacy@resumegenie.dev. For anything else, russ@resumegenie.dev.

What we collect

Your account

Your name and email address, which you give us by signing in with Google, Microsoft or GitHub (or your agency's single sign-on), and which you confirm through a verification email. We also keep which of those providers you signed in with, the passkeys you add (their public keys and the names you give them; the private key never reaches us) and your sign-in sessions (when and from which IP address). There are no passwords. We do not keep the access to your Google, Microsoft or GitHub account that signing in grants: it is used once, at sign-in, to read your name and email address, and then discarded.

What you put in

• Your experience record: contact details, jobs, roles, projects, notes in your own words, education, certificates, awards, publications, languages and skills.
• The resumes you upload as PDFs, both what we read from them and the original file.
• The job adverts you paste or upload, and the applications and resumes written for them, with the copy of your record each resume was written from.
• In an agency: its candidates' records, who confirmed each candidate's consent and when, its branding (name, email, phone, fine print and logo), its members and their roles, and its email domain and single sign-on settings.

A resume usually carries only what an employer should see. Please leave out what they should not, such as health, religion, ethnicity, political views or identity numbers; you do not need any of it to use ResumeGenie.

What we record when you use it

• A count of your AI calls, so we can apply the daily limits.
• Server logs: your IP address, your browser's name and version, a random session id, the pages and requests you make, their timing and outcome, and the file names of PDFs you upload. Logs are not meant to hold your record, resumes or job adverts, but a report of an error can include a fragment of the text that caused it.

We do not use analytics, advertising or tracking of any kind, we do not sell your information, and we never share it with employers. You decide where each resume goes.

Why we use it

• To provide ResumeGenie (performing our agreement with you): your account, your record, reading your uploads, writing and rendering your resumes, and agencies working for their candidates.
• To keep it secure and working (our legitimate interest in a safe, reliable service): logs, sign-in checks, AI-call limits and investigating abuse.
• To meet the law: answering requests about your information, and keeping records the law requires.

We use your information for nothing else. ResumeGenie makes no decisions about you: the AI writes drafts, and you review, change and decide what to send.

How AI is used

When you upload a resume or a job advert, add a resume or an AI app's additions to your record (each new line is compared with what is already there), ask for a resume, or check how a resume covers a job, the text involved is sent to an AI model: for a resume, your whole experience record and the job advert. An uploaded resume is first read by Mistral's OCR (an uploaded job advert only when it is a scan with no text of its own), and the text is then structured by a model through OpenRouter.

Every other model call goes through OpenRouter, and we have it route our calls only to model providers that keep none of what we send once they have answered and never train on it. The models never see who you are beyond what is in the text itself, and nothing is used to train any model, ours or anyone else's.

In an agency, a candidate's name is replaced with a reference, and their contact details removed, before their record is sent to write a resume. Reading an uploaded PDF still needs the whole document, and what is added to the record is compared with the record as it is written.

Who else sees it

We share your information only with these, and only what they need; netcup, OpenRouter and Mistral act on our instructions, the others under their own terms:

• netcup (Germany): runs the servers that host ResumeGenie, its database, its sign-in and our backups.
• OpenRouter (United States): routes the AI calls above to the model providers, under the no-storage, no-training rule above.
• Mistral AI (France): reads uploaded resumes, and job adverts that are scans. Mistral may keep what it reads for up to 30 days to detect abuse, then deletes it.
• Google, Microsoft and GitHub, or your agency's identity provider: sign you in. They learn that you signed in to ResumeGenie.
• Google Forms: the Feedback link opens a Google Form. What you type there goes to Google, under Google's privacy policy; nothing else is sent with it but which version of ResumeGenie you were using.
• Google Fonts, Cloudflare and BootstrapCDN: some resume themes load their fonts and icons from these, so when you preview a resume your browser fetches them, and they see your IP address. Nothing from the resume is sent.
• The agencies you join: their members see your name, email address and role, and the candidates and applications you work on there; their admins see a request to join with your name and email.
• An agency you grant access: if you approve an agency's request, it can read your experience record, and sees your name and verified email, until you revoke it.
• An AI app you connect, such as Claude: it can read and edit your record and applications in every workspace you belong to, and what it reads goes to that app's provider under your own terms with them. You can disconnect it on Account at any time.

We host ResumeGenie, its database and its sign-in on netcup's servers in the European Union (Germany and the Netherlands), and keep our backups in Germany. Our own emails, such as verifying your address, go through our own mail server. We would also disclose information if the law required it.

Agencies and their candidates

An agency decides what it holds about its candidates and why, so for a candidate's information the agency is the responsible party (the controller), and we act on its behalf as its operator (processor). Before adding a candidate, an agency confirms the candidate agreed that it holds and processes their details. If you are a candidate, ask the agency first about your information; we will pass on any request we receive.

Granting an agency access to your own record is your choice, and you can revoke it on Account at once. Resumes the agency already wrote or sent cannot be recalled, and it keeps, with each one, the copy of your record (without your name and contact details) it was written from.

How long we keep it

• Your account, record, resumes and applications: until you delete them, or your account.
• An uploaded resume you neither accept nor cancel: 24 hours.
• Invite links: 7 days from when they are made, used or not (at once when revoked).
• AI-call counts: one day.
• Server logs: up to 30 days.
• A sign-up you did not finish (terms declined, email never verified, or no passkey): your name, email and sign-in provider, for 7 days.
• Backups: deleted information stays in our backups for up to 6 months, until they are replaced. If we ever restore one, we delete again what you had deleted.

Deleting your account deletes your sign-in, your personal workspace and everything in it, and any agency you are the only member of. What you added to an agency others are in stays with that agency, as its information. There, a random account id (never your name or email) remains where it records who confirmed a candidate's consent, who a candidate is assigned to, who made or used an invite (until it expires), that you left (so its single sign-on does not add you back), and, for a day, its AI-call counts.

Your browser

We use only the cookies sign-in needs, set by our sign-in pages to keep you signed in; no tracking or advertising cookies, so there is nothing to opt out of. The app keeps your work in progress in your browser's storage (the job advert, the resume being edited, an upload under review), with the application open, the workspace you used last, a random session id and, while you sign in, the state of that sign-in. Signing out clears all of it.

Your rights

Under POPIA and the GDPR you can:

• see the personal information we hold about you, and get a copy (Account, Download my data);
• correct it (your record and your name and email are editable in the app);
• delete it (each item where it is, or your whole account on Account);
• object to or ask us to restrict how we use it, and withdraw anything you agreed to;
• complain to a regulator: in South Africa the Information Regulator, in the EU the data protection authority where you live.

For anything the app does not do itself, write to privacy@resumegenie.dev. We answer within 30 days, and may ask you to confirm it is you.

Information from Google

If you sign in with Google, we ask Google only for your basic profile and email address. Google sends your name, email address, whether Google has verified it, your Google account id and your profile picture and language; we keep your name, email address and Google account id, and use them only to create your account and sign you in. We do not use them for advertising, sell them, share them except as this policy says, or use them to train AI models. ResumeGenie's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Information across borders

Your information is stored in the EU, managed from South Africa, and sent to OpenRouter (United States) and the model providers it routes to, which may be outside the EU. Each of these services is bound by terms that protect it at least as well as POPIA and the GDPR require.

Security

Everything travels over HTTPS. You sign in with a provider or a passkey, never a password. Each workspace's information is kept apart in the database, and only its members can reach it (in an agency, a candidate kept to their assignee only by them and the admins), plus, for your experience record, an agency you have granted access. If a breach puts your information at risk, we, or for an agency's candidates the agency, will tell you and the regulators as the law requires.

Age

ResumeGenie is for people aged 16 and over. If you believe someone younger has an account, tell us and we will delete it.

Changes

We will post any change here and update the date at the top. If a change affects how we use information you have already given us, we will tell you before it applies.