Privacy Policy
Last updated: January 2026
1. Introduction
ResumeXrays ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our resume analysis service ("the Service").
By using the Service, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Resume Data: The resumes and documents you upload for analysis, including personal information contained within them (name, email, phone number, work history, education, etc.)
- Account Information: Information received through OAuth authentication, including your name, email address, and profile picture
- Job Descriptions: Job postings you provide for comparison analysis
- Payment Information: Billing details processed through Stripe (we do not store your full credit card number)
2.2 Information Collected Automatically
- Usage Data: Information about how you use the Service, including pages visited, features used, and analysis results viewed
- Device Information: Browser type, operating system, IP address, and device identifiers
- Cookies: Session cookies for authentication and analytics cookies for service improvement
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Analyze your resume and generate compatibility reports
- Provide AI-powered content suggestions and improvements
- Process your payments and manage your subscription
- Send you service-related communications
- Improve and personalize the Service
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. How We Share Your Information
We do not sell your personal information. We may share your information with:
4.1 Service Providers
- Anthropic: For AI-powered resume analysis (your resume content is processed to generate suggestions)
- Stripe: For payment processing
- Google: For authentication (OAuth) and analytics (Google Analytics)
- Railway: For hosting and data storage
4.2 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.
5. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Regular security assessments
- Access controls and authentication
- Secure hosting infrastructure
However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. Specifically:
- Resumes and Analyses: Retained while your account is active and for 30 days after account deletion
- Account Data: Retained while your account is active
- Payment Records: Retained for 7 years for legal and accounting purposes
- Usage Analytics: Aggregated data may be retained indefinitely
7. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Request a copy of your data in a portable format
- Objection: Object to certain processing of your data
To exercise these rights, contact us at privacy@resumexrays.com.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect and how it is used
- Right to delete your personal information
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your privacy rights
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.
10. Cookies
We use the following types of cookies:
- Essential Cookies: Required for authentication and core functionality
- Analytics Cookies: Google Analytics to understand usage patterns
You can control cookies through your browser settings, but disabling cookies may affect the functionality of the Service.
11. Children's Privacy
The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
12. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party sites you visit.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or sending you an email. Your continued use of the Service after such changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: privacy@resumexrays.com
General Inquiries: help@resumexrays.com
By using ResumeXrays, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein. See also our Terms of Service.