Legal

Privacy Policy

Clauses10

Clauses in this document; the ring is the words in each, in order.

Words905

Counted rather than estimated; the ring is how they divide between the longest parts.

Minutes to read5

At 200 words a minute; the ring is each part's share of the time.

Last updated20 Aug 2026

August 20, 2026. 43 days ago; the arc is that share of a year.

The document, one clause at a time.

Clause 01 / 10

Information We Collect

At Resumetricx, we collect information that helps us provide and improve our CV analytics platform:

Account Information: Name, email address, and password when you create an account
CV Content: Information you include in your resume (work experience, education, skills, etc.)
Reading Data (from people who open your shared CV): when it was opened and for how long, seconds on each of ten named sections, the order those sections were read in, re-reads and scroll depth, which of your links were clicked, which application link was used, device type, browser name, operating system, the referring page, and the country the request came from. The IP address is used to derive the country and is then not stored — no city, no region, no coordinates. Browser version, screen size and language are dropped.
Uploaded Documents: a CV you upload to share unchanged is stored as a file so it can be served to whoever holds the link. Readings of an uploaded file record only the open, the duration, the device type and the country — never which parts were read, because the file has no section markers in it.
Reader-Supplied Identity: a name, and optionally a company, an email address and a short note, only where a reader has typed them into the optional card on a shared CV. Nothing is inferred, looked up or matched, the card is dismissible, and it is not shown at all to a reader who has objected to tracking.
Usage Data: How you interact with our platform, features you use, and preferences
Device Information (about you, in your own account): browser and operating system, and your IP address at the time of a request, for security and abuse prevention

The complete field-by-field inventory, in both directions, is on what we collect. If the two ever disagree, that page is the one kept in step with the code.

Clause 02 / 10

How We Use Your Information

We use collected information to:

Provide and maintain our CV analytics service
Generate real-time recruiter engagement insights
Improve and personalize your experience
Send important service updates and notifications
Provide customer support
Protect against fraud and abuse
Comply with legal obligations

Clause 03 / 10

Information Sharing

We do not sell your personal information. We may share information only in these cases:

When you share a CV: the document you share is shown to whoever holds the link. The reading it produces is processed on our legitimate interests in providing the measurement you asked for — not on consent — so the reader has the right to object at any time, and that control takes one click with no account. Global Privacy Control and Do Not Track are honoured automatically and cannot be overridden by us.
Service Providers: six named processors — Firebase/Google Cloud, Stripe, SendGrid, IPinfo, Vercel and OpenAI — each listed with what it receives, where it is, and the transfer basis, on our subprocessors page.
Legal Requirements: When required by law or to protect rights and safety
Business Transfers: In case of merger, acquisition, or sale of assets

Clause 04 / 10

Data Security

We implement industry-standard security measures to protect your data, including encryption, secure servers, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Clause 05 / 10

Your Rights

You have the right to:

Access and download your personal data (Art 15 and Art 20 — one JSON file, from your plan page or the consent page, without emailing anyone)
Correct inaccurate information (Art 16)
Request deletion of your account and data (Art 17)
Object to processing (Art 21). This is the right that matters most here, and it belongs to anyone who opens a CV shared through this service as well as to you — because read tracking runs on legitimate interests rather than consent. Object here.
Opt out of marketing communications
Export your CV data in standard formats
Lodge a complaint with a supervisory authority (Art 77). You may do this in the country where you live or work, and you do not have to raise it with us first.

Clause 06 / 10

Cookies and Tracking

We use cookies for the things an account needs — keeping you signed in, and remembering your preferences. We set no cookies at all on the device of someone who merely opens a CV you shared, and no third-party advertising or tracking pixels anywhere. You can control cookie preferences through your browser settings; if you are a reader rather than an account holder, the control you want is the one-click objection on the transparency page, and a Global Privacy Control or Do Not Track signal is honoured before you arrive.

Clause 07 / 10

Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your data within 30 days, except where required by law.

Separately, and whether or not you ever delete anything, reading data expires on a fixed schedule that runs automatically: raw view and interaction events are deleted after 90 days, per-document aggregates after two years, and billing records are kept for seven years because tax law requires it. §13 of the Terms states the same periods.

While your account is active
Retained
For as long as the account is active, or as long as needed to provide the service.
After 90 days
Raw reading events expire
Individual view and interaction events are deleted automatically, whatever your account is doing.
After 2 years
Per-document aggregates expire
The totals kept against each CV are deleted on the same automatic schedule.
Within 30 days of deletion
Account deleted
Your account and its data are deleted, except billing records the law requires us to keep for seven years.