Templates How It Works Pricing FAQ About

Legal

Privacy Policy

Last updated: April 13, 2026

TL;DR — The key points

  • We never sell your data to recruiters or third parties
  • Your resume content is yours — you can export or delete it anytime
  • We use essential and privacy-friendly product analytics — no advertising trackers, and your resume content is never recorded
  • Delete your account and all data is wiped within 30 days
  • Payments processed securely by Polar.sh (Merchant of Record)

1. Introduction

ResumeOpen ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

Information you provide

  • Account information: When you register, we collect your name, email address, and password.
  • Resume content: Information you enter into your resumes, including work history, education, skills, and contact details.
  • Communications: Messages you send to us through our contact form or email.

Information collected automatically

  • Usage data: Pages visited, features used, timestamps, and referring URLs.
  • Device information: Browser type, operating system, screen resolution, and IP address.
  • Cookies: Session cookies for authentication and preferences. Our payment processor Polar may also set cookies during the checkout process. With your consent, we also set product analytics cookies (see below). We do not use advertising or ad-targeting cookies.

Analytics, product usage, and session recording

To understand how the product is used and to fix bugs, we use two analytics tools, both gated behind your cookie consent:

  • Google Analytics 4 (GA4): Aggregate, anonymous traffic and acquisition data (pages visited, referring source, country-level location). GA4 is loaded only after you accept cookies.
  • PostHog: Product analytics, feature-flag evaluation, and limited session recording. We use PostHog to see which features people use, where they get stuck, and to safely roll out new features. PostHog is hosted on US infrastructure (us.i.posthog.com).

What session recording does not capture: resume content is never recorded. We mask all form inputs by default, mask any element marked as sensitive, and fully block the resume editor, cover letter editor, AI review pages, and live preview canvases from being included in any recording. The resume you write is never sent to PostHog as recording data.

What we do capture: the events listed above (page views, button clicks, template switches, exports, subscription lifecycle, AI provider fallbacks). These are tied to your account once you sign in so we can analyze conversion funnels and retention. You can opt out at any time by declining or clearing cookies.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Create and manage your account
  • Generate, store, and export your resumes
  • Respond to your inquiries and support requests
  • Send important service-related notifications
  • Monitor and analyze usage patterns to improve user experience
  • Detect and prevent fraud, abuse, or security incidents

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

  • Payment processor: We use Polar.sh (Polar Software Inc) as our payment processor and Merchant of Record. When you make a purchase, Polar collects and processes your payment information (name, email, billing address, payment method). We share your name and email address with Polar for customer creation and transaction processing. Polar's privacy policy can be found at polar.sh/legal/privacy.
  • Service providers: Other trusted third parties that help us operate our services (e.g., hosting, email delivery), bound by confidentiality agreements.
  • Legal requirements: When required by law, regulation, legal process, or government request.
  • Safety: To protect the rights, property, or safety of ResumeOpen, our users, or the public.
  • Shared links: If you generate a shareable resume link, anyone with that link can view that specific resume. You can disable sharing at any time.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Hashed passwords (bcrypt)
  • Regular security updates and monitoring
  • Access controls limiting who can access user data

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your account data and resume content for as long as your account is active. If you delete your account, all personal data and resumes are permanently removed from our servers within 30 days.

7. Your Rights

You have the right to:

  • Access your personal data stored with us
  • Correct inaccurate or incomplete information
  • Delete your account and all associated data
  • Export your resumes as PDF files
  • Withdraw consent for optional data processing at any time

To exercise any of these rights, please contact us at [email protected].

8. Third-Party Services

Our service integrates with the following third-party services:

  • Polar.sh: Payment processing and Merchant of Record. Polar handles all payment transactions, tax collection, and invoicing on our behalf. See Polar's Privacy Policy.
  • Authentication providers: We may integrate with third-party authentication providers (e.g., Google, LinkedIn) for social login. When you use these services, their respective privacy policies apply to the data they collect. We only receive the basic profile information necessary to create your account.
  • Google Analytics 4: Aggregate website analytics. Loaded only after cookie consent. See Google's Privacy Policy.
  • PostHog: Product analytics, feature flags, and session recording (with resume content masked and editor surfaces blocked from capture). Loaded only after cookie consent. See PostHog's Privacy Policy.

9. Children's Privacy

ResumeOpen is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: