Privacy Policy
Last updated: 27 October 2026
1. General Information
ResuMate (“Platform” or “Service”), operated by S.C. Helix AI S.R.L., respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
The data controller is:
S.C. Helix AI S.R.L., registered in Romania
Email: support@resumate.works
2. Data We Collect
a) Data you provide directly:
- Name and surname
- Email address
- CV content (work experience, education, skills, etc.)
- Job descriptions you input
b) Data collected automatically:
- IP address
- Browser and device information
- Usage data (interactions with the platform)
c) Free trial scan (no account):
If you use the free “How strong is my CV?” check without signing up, the resume text (and any job description) you submit is processed to generate your instant result and stored temporarily so it can be shown to you again. This anonymous trial data is automatically deleted after 7 days unless you create an account and unlock the full report, in which case it becomes part of your account data.
d) Free CV Builder (no account, in your browser):
When you use the free CV Builder, the CV content you enter is processed entirely in your browser to build and download your document. It is not transmitted to or stored on our servers, and it is not processed by any AI system. If you then choose to match your CV against a job, that starts a trial scan (see (c) above), at which point your CV and the job description are processed to generate your result.
If you use “Find roles that fit”, the job title and location you have entered are sent to our job-search provider (Adzuna) to return matching live postings. No other builder content leaves your browser, and we do not store the search.
3. Purpose of Data Processing
We process your data strictly to:
- Provide ResuMate services (CV analysis, optimisation, ATS scoring, etc.)
- Generate personalised content (CVs, cover letters, suggestions)
- Improve platform performance and features
- Ensure security and prevent abuse
- Communicate with users (support, notifications)
4. Legal Basis
We process your data based on:
- Your consent (Art. 6(1)(a) GDPR)
- Performance of a contract (Art. 6(1)(b))
- Legitimate interest (Art. 6(1)(f)) — for security and service improvement
5. Use of Artificial Intelligence
ResuMate uses trusted third-party AI providers to process resume and job application content in order to generate analyses, rewrites, interview coaching, and related outputs.
- Under our providers’ commercial API terms, your data is not used to train AI models.
- Processing is strictly limited to delivering the requested service.
- Our current AI sub-processors are listed in our Records of Processing, available on request.
- The free CV Builder does not use AI: it is a manual, prompt-guided tool, and the CV you create there is written by you.
6. Data Storage & Security
We implement appropriate security measures to protect your data, including:
- HTTPS encryption
- Access control mechanisms
- Data minimisation practices
Your data is stored only for as long as necessary to provide the service or comply with legal obligations.
Inactive account retention: if you have not logged in for 24 consecutive months, your account and all associated data (CV content, analyses, cover letters, interview sessions) will be permanently and automatically deleted on the first day of the following calendar month. You will not be able to recover this data after deletion. To retain your data, simply log in at least once every 24 months.
7. Data Sharing
We do not sell your personal data.
Data may be shared only with:
- Service providers (hosting, AI, payment processors), strictly for service delivery
- Authorities, if required by law
8. Your Rights
Under GDPR, you have the right to:
- Access your data
- Rectify inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
To exercise these rights, contact: support@resumate.works
9. Children
ResuMate is not intended for individuals under 16 years of age. We do not knowingly collect personal information from individuals under 16. If we become aware that such information has been provided, we will take reasonable steps to delete it.
10. Cookies
We may use cookies to:
- Ensure proper platform functionality
- Analyse and improve user experience
You can control cookies through your browser settings.
11. Advertising, Measurement & Remarketing
We run ads on Google to help people discover ResuMate. If you consent, we use Google Ads to measure how well those ads work and to show you ResuMate ads on other sites (remarketing). ResuMate does not display third-party ads on its own pages.
What this involves:
- Measurement: when you arrive from a Google ad and later complete an action such as a purchase, a conversion signal is sent to Google so we can see which ads led to it.
- Enhanced conversions: to measure a purchase more accurately, a one-way hashed (SHA-256) version of your email address may be sent to Google alongside the purchase signal. The hash cannot be reversed back into your email, and we never send your email address in the clear for advertising.
- Remarketing: Google may build an audience from your visit so we can show you ResuMate ads on other sites. Your CV content and the job descriptions you enter are never used for this.
Processor: Google Ireland Limited acts as our advertising provider and processes the signals above on our behalf to deliver measurement and remarketing.
Legal basis: your consent (Art. 6(1)(a) GDPR). None of this fires until you opt in, through the cookie banner, the optional box at sign up, or your account settings. In regions that allow it we may treat continued use as consent, with a clear notice and an easy opt-out shown; in the EEA, the UK and Switzerland we ask first and default to off.
How to withdraw: open Cookie preferences in the footer at any time, or change your choice in your account settings. Withdrawing stops future advertising signals. It does not affect data already processed while consent was active.
12. Updates
We may update this Privacy Policy from time to time. Changes will be published on this page.