Privacy Policy

Resume Magic AI is a resume analysis and optimization service operated by Ermias Group LLC, based in Miami, Florida, United States. This policy describes the information the product actually collects and processes today.

• Your email address, and a name if you choose to enter one when you create an account.
• Authentication records needed to sign you in, including sign-in provider information when you use Google sign-in, and password-reset events.
• A record of your acceptance of these policies: which policy version you accepted, when, and the account it belongs to.
• A billing customer reference and purchase records (purchase type, amount and status) when you buy something.

When you use the service, our hosting, authentication, security and error-monitoring systems may collect:

• Your IP address.
• Browser and device information, such as browser type and version, operating system and screen size.
• Access timestamps.
• Pages you open and product actions you take, such as starting an analysis, unlocking a result or downloading a file.
• Authentication and security events, such as sign-in attempts, sign-outs, password resets and rate-limiting or abuse signals.
• Crash reports and diagnostic logs generated when something fails.
• Cookies, local storage and session storage used to keep you signed in and to hold the work in progress in your browser.

Advertising measurement (Google Ads): only if you click "Accept" in the cookie banner, we load Google's ad tag, which sets cookies to recognise a Google ad click and to report a completed purchase. For a purchase Stripe has confirmed, Google receives the amount, currency and Stripe order reference — never your résumé, job descriptions, name or email, and no enhanced conversions are used. If you decline, the tag is not loaded. You can change or withdraw your choice anytime with "Cookie settings" in the footer; your choice, its date and the notice version are stored in your browser.Resume Magic AI uses no product-analytics tracker. This technical information is generated by the hosting, database and authentication platform (Lovable Cloud) and by the built-in error reporting used to diagnose failures. We do not name a monitoring or analytics provider we have not confirmed.

Resume Magic AI also stores limited feature-usage counts — such as how many interview reviews your account has requested on a given day — to apply service limits and to support security and abuse prevention. These counts hold no interview questions, answers, recordings, transcripts or feedback.

Monitoring is not designed to capture your resume text, the job descriptions you paste, your password, your payment-card details or the full prompts sent to our AI provider. Error reports carry the failing code path and a provider error type, not your submitted content.

To produce a match analysis you upload a resume file or paste resume text, and you paste the job description you are targeting. You may also answer optional clarification questions so the service can verify which skills your own experience supports.

This content is processed to produce your match score, qualification breakdown, verification results and optimized resume. It is not used to advertise to you and it is not sold.

• Your optimized resume result, in the canonical form the product exports as preview, plain text, PDF and Word.
• Match scores before and after optimization, and the verification and evidence results behind them.
• Experience Examples context used to present supporting evidence and gaps.
• Optional destination-market preferences you enter for the application checklist.
• Application-tracking fields you enter yourself: status, application date, follow-up date and your private notes.

• Account and authentication data: to create your account, sign you in and keep your saved work scoped to you.
• Resume and job-description content: to run the analysis, verification and optimization you requested.
• Stored results, Proof Pack context, destination preferences and tracking fields: to let you reopen, export, compare and organize your saved work.
• Purchase records: to unlock what you bought, show your purchase history and support refund and dispute handling.
• Service, security and fraud-prevention processing: to keep the service working, detect abuse and protect accounts.
• Transactional email: to reset your password, notify you about account security and confirm payments or subscription changes.

Work in progress — the resume text, job description and analysis you are currently working on — is held in your browser session so you can move through the workflow without an account. Once you create an account and a result is saved, your saved optimized resumes, scores, Proof Pack context, destination preferences and tracking fields are stored in our authenticated cloud database, scoped to your user account by row-level access rules. Some information therefore exists both locally in your browser and in the database.

The following providers are confirmed from this product's own configuration:

• OpenAI — the service calls the OpenAI API directly; there is no other AI gateway or reseller in between. The resume content and job description you submit are transmitted to OpenAI so it can produce the analysis and optimization you requested. Under OpenAI's API terms, API inputs and outputs are not used to train OpenAI models by default unless the API organization affirmatively opts in, and we have not opted in. OpenAI's standard abuse-monitoring logs may retain API content for up to 30 days unless approved enhanced retention controls apply. We do not claim Zero Data Retention for this API project, because that has not been verified for it. See OpenAI's Privacy Policy and API data controls.
• Stripe — payment processing and subscription management. Card payments are entered on Stripe's checkout and billing surfaces; Resume Magic AI does not receive your complete card number. See Stripe's Privacy Policy.
• Google — an optional sign-in provider. If you choose “Continue with Google,” Google authenticates you and returns basic account identifiers such as your email address. See Google's Privacy Policy.
• Lovable Cloud — the managed database, authentication and hosting infrastructure where your account, saved results and technical logs are stored.

We do not name providers we have not verified, and we do not claim any certification or formal compliance program.

Accounts are confirmed automatically today, so creating an account does not send you a confirmation email. The messages currently configured and capable of being delivered are:

• Password-reset messages, when you request one.
• Account-security messages related to sign-in and password changes.
• Payment receipts and subscription messages sent by Stripe for purchases, renewals, cancellations and failed payments.

Resume Magic AI currently does not send marketing email, and does not sell resume data. Receiving the messages above is not marketing consent.

Under the current product, your information is not shared with employers, recruiters, staffing firms or career partners. Nothing you submit is published or listed anywhere. The service prepares materials for you to send yourself.

• You choose whether to create a private review link for a saved resume, and you choose who receives it. Resume Magic AI does not send it for you.
• Anyone who receives the link, including anyone it is forwarded to, can view that resume until the link expires seven days after it is created. The link stops working if you delete the resume. It cannot be switched off before it expires.
• By default the link hides your email address and phone number. You can turn that off when you create the link.
• Feedback written by the reviewer is not stored by Resume Magic AI. It stays in the reviewer’s browser until they copy or share it, and they return it to you through a service they choose.

The browser extension is optional. It only reads the page you are looking at when you press a button in the extension window — it never runs in the background, never follows you between pages, and never collects your browsing history.

• Saving a job: when you press “Save This Job to Resume Magic”, the extension reads the job details shown on that page (title, company, location, working arrangement, salary as displayed, employment type, deadline, description, the page address and the date). You see every field and can edit it before anything is saved. Only normalised plain text is stored, in your own Saved Jobs. The full page is never stored and page code is never run.
• Helping fill an application: when you press “Help Fill This Application”, the extension reads the visible fields of that form so it can propose answers from the autofill details you entered and approved. Proposed answers are shown for your review; only the ones you approve are written. The extension never submits an application, never enters a password or verification code, never answers a CAPTCHA, and never uploads a file.
• Signing in: the extension holds a sign-in token for your account on your own computer. It never receives your password and never receives payment or administrative keys. You can sign the extension out at any time, which deletes the token stored in your browser, and you can disconnect every browser from your account page.
• Choosing a document: when you pick a saved resume or Application Kit in the extension, it receives only the name of that document and the address on the Resume Magic AI website where you download it yourself. The extension never selects a file, never fills a file-upload box and never uploads anything. It can only outline the page’s own upload button so you can find it.
• Draft answers: if you ask for a draft answer to a written question, the draft is assembled only from details you entered, the resume you selected and the job you saved. Nothing is invented, the whole draft is shown to you for editing, and it is only inserted after you approve it.
• Limited use disclosure: the extension reads page content only on the tab you are looking at, only at the moment you press “Save This Job to Resume Magic” or “Help Fill This Application”, and only the job details or visible form fields needed for that feature. It does not monitor your browsing, does not read other tabs, does not run in the background, does not read cookies or passwords, and stores no page history. What is stored is the job text you confirm (in your own Saved Jobs) and the autofill details you typed. Use of information received from Google APIs, and any other information obtained through the extension, adheres to a limited-use policy: it is used only to provide these user-facing features, is never transferred except as required to provide them, is never sold, and is never used for advertising or to train models.
• Limited use: information the extension obtains is used only to provide these features to you. It is never sold, never shared with third parties for their own purposes, never used for advertising or to build profiles, and never used to train models. Everything it sends travels over an encrypted connection to Resume Magic AI only.

• A small number of authorised Resume Magic staff can open a private back office. Access is granted to specific accounts by their permanent account ID, never by email address or a browser setting.
• Staff see service-level information such as account and purchase counts, purchase status and amount, and — for support — limited account details with a masked email address. Billing information is read-only.
• Staff tools never show your resume text, job descriptions, notes, uploaded files or interview content.
• Every staff page view and lookup is recorded in an audit log that cannot be edited or deleted.
• Optional product analytics (first-party): only if you click "Accept" in the cookie banner — the same choice that covers Google Ads measurement — Resume Magic records limited events such as a visit, a new account, a résumé being added or selected, a match being started or completed, and a checkout, purchase, refund or dispute. Nothing is recorded before you accept, after you decline, or after you withdraw; accepting again counts only future events. These events are linked to your account or a random visit reference and may include campaign labels and, with your Accept, an ad click reference. They never include résumé or job-description content, uploaded files, names, email addresses or payment details. Declining never affects your account, purchases, refunds, résumés, credits or unlocks.
• To honour your choice we keep a minimal record of it: whether you accepted or declined, the notice version and the time, linked to a random visit reference and, when you are signed in, your account. Detailed analytics events are deleted after 90 days; anonymous daily totals are kept for 13 months. Staff see only totals and rates. This measurement is currently switched off.

• You can permanently delete an individual saved resume from the Application Board on your Account page. Deletion removes that record from the active product.
• To request deletion of your entire account, the primary method is the in-app request: sign in, open My Account → Data & Privacy and choose “Delete my account”. Because the request is made from a signed-in session, it is recorded against your verified account with the date and a pending status. See the account deletion page for full detail.
• As a fallback, if you cannot sign in, email support@resume-magic.app. Ermias Group LLC may verify that you control the account through a signed-in account action or a secure verification message sent to the registered email address before the request is processed.
• An account-deletion request does not automatically cancel a Pro subscription. Cancel it through My Account → Manage Subscription so it does not keep renewing.

Complete account deletion covers:

• Authentication and profile information, including your email address, any name you entered and your sign-in identities.
• Saved resume and job-description records.
• Optimized results and Experience Examples context.
• Destination-market preferences.
• Application-tracking records, including status, dates and your private notes.

Separately, minimal purchase, tax, accounting, fraud-prevention, chargeback and other legally required records may remain after deletion. Ermias Group LLC also cannot delete records that are held and controlled by Stripe or by OpenAI under their own retention practices, and does not promise to do so.

• Information tied to an active account is retained while it is needed to provide the service.
• An individual saved resume is removed from the active product when you delete it.
• Verified account-deletion requests are targeted for completion within 30 days.
• Limited backup copies may remain for up to 30 days before routine deletion.
• Transaction, tax, accounting, fraud-prevention, chargeback, dispute and other legally required records may be retained for the period required.
• Payment records held by Stripe are controlled by Stripe under its own retention practices; we cannot delete those records on your behalf.
• Deletion may be delayed where preservation is legally required, for example during an open dispute or a legal hold.

We use reasonable technical and organizational measures to protect your information, including authenticated access, per-account access rules on stored records and encrypted connections. No online service can guarantee absolute security, and we do not claim that your information can never be accessed without authorization.

Resume Magic AI is intended only for individuals who are at least 18 years old. We do not knowingly permit children under 18 to create accounts or submit personal information.

If these policies change, the Last Updated date at the top of the page will change. Where appropriate or legally required, we will also give reasonable advance notice of material changes through the service or to your registered email address before those changes take effect.

Privacy questions and deletion requests: support@resume-magic.app.