Privacy notice
Last updated October 30, 2026
Data controller
Maaz Yasir is the data controller for ResumeRoaster account and service data. Contact maazyasir31@gmail.com for privacy questions or rights requests.
Information and purposes
We process your name, email, sign-in credentials and account identifiers to create, secure and manage your account. Resume content, job descriptions, generated feedback, scores, ratings and style notes are used to provide and personalize resume reviews. Purchase identifiers, plan status and usage records link purchases to your account and enforce purchased allowances. Support messages help resolve requests. IP addresses, device information and technical error/usage logs support security, reliability and abuse prevention.
Legal bases
We process account, resume and purchase data to perform our contract with you. Security and reliability processing is based on legitimate interests balanced against your rights. Legally required records are processed to meet legal obligations. If optional consent-based processing is introduced, you can withdraw consent without affecting prior lawful processing.
Sharing and processing
We use Lovable Cloud for hosting and account/data services, and AI processing providers accessed through Lovable to generate feedback. Resume content is sent to AI processors for the requested review. Stripe receives purchase attribution and customer details for sales, subscriptions, payments, tax compliance, fraud prevention and invoicing, and acts as Merchant of Record where full compliance handling applies. Providers process only information needed for their services. We may share relevant information with professional legal/accounting advisers or authorities when legally required. We do not sell resume data or publish private resume results. Ratings personalize prompt context; they do not fine-tune a model.
Retention and deletion
Saved feedback and personalization remain until you delete them or request removal. Uploaded files are processed for the review rather than stored as a permanent upload library; resume excerpts may appear in saved results and technical processing records. Settings deletes saved roasts and style data, but retains the account, subscription/purchase history and usage ledger so billing and lifetime allowances remain accurate. Transaction, security and support records are retained only as needed for service delivery, fraud prevention, dispute handling and legal obligations, then deleted or anonymized. Ask us for deletion of remaining personal data; legal retention obligations may apply.
Security and transfers
We use appropriate technical and organizational safeguards, including encrypted connections and account-scoped access controls. No system is completely risk-free. Providers may process data outside your country. Where applicable law requires international transfer safeguards, we rely on appropriate contractual safeguards or adequacy mechanisms; contact us for details applicable to your request.
Your rights
Depending on your location, you may request access, correction, erasure, restriction, portability or object to certain processing, withdraw consent, and complain to your local data-protection authority. Email the contact above. We verify identity where necessary and respond within applicable legal deadlines, including generally one month for applicable UK/EEA requests.
Cookies and browser storage
Essential authentication cookies or browser storage keep you signed in. Local storage remembers your theme; session storage preserves a selected plan during sign-in. Payment checkout uses Stripe's essential payment/session technology. We do not add optional advertising trackers in the app. You can clear or block browser storage in your browser settings; doing so may sign you out or interrupt checkout. Provider privacy notices describe their own technology.