Last updated: June 19, 2026
My Resume Robot ("we", "us", "our") operates the website myresumerobot.com and the web application at webapp.myresumerobot.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.
Account Information: When you create an account, we collect your email address and password (stored as a secure hash). If you sign in with LinkedIn, we receive your name, email address, profile headline, profile picture URL, and LinkedIn user identifier.
Profile Data: You may provide professional information including your name, contact details, work experience, skills, education, certifications, and interests. This data is provided voluntarily and is used to generate resumes and cover letters.
Imported Data: If you upload a resume file or paste profile text, we process that content to extract structured professional data. Uploaded files are processed in memory and are not stored after extraction.
Job Posting Data: When you paste a job posting for resume generation, we store the posting text to generate tailored content and allow you to manage your applications.
AI-Generated Content: We store resumes and cover letters generated by our AI system, along with metadata about AI usage (provider, model, token counts, duration) for service monitoring and cost management.
Technical Data: We automatically collect standard server log data including IP addresses, browser type, and access times for security and performance monitoring.
AI Providers: We use third-party AI services (Anthropic Claude and OpenAI) to parse resumes, generate content, and provide suggestions. Your professional data and job posting text are sent to these providers for processing. These providers process data according to their own privacy policies and data processing agreements.
Payment Processors: Paid subscriptions are processed by Stripe and PayPal. When you subscribe, you provide your payment details directly to these processors; we do not store your full card or bank details on our servers. We receive limited billing information from them (such as your plan, subscription status, the last four digits of a card, and transaction identifiers) to manage your subscription. Stripe and PayPal handle your payment information under their own privacy policies.
Email Delivery: We send transactional emails (such as email verification, password resets, and billing notices) through our mail server and delivery providers. We do not send marketing email without your consent.
Cross-Border Processing: Some of our service providers (including the AI and payment providers above) are located in the United States. By using the Service, you acknowledge that your information may be processed and stored outside Canada, where data-protection laws may differ. We take reasonable steps to ensure your information is handled in accordance with this policy.
LinkedIn: If you choose to sign in with LinkedIn, we use LinkedIn's OpenID Connect protocol. We only receive the basic profile information you authorize (name, email, headline, photo). We do not access your LinkedIn connections, messages, or activity.
Web Scraping: If you provide a URL to import a profile from a job site (Indeed, Glassdoor, etc.), we visit that publicly accessible page to extract text content. We do not log in to any service on your behalf.
Your data is stored in a secured PostgreSQL database. Passwords are hashed using bcrypt with a work factor of 12. Authentication uses JWT tokens with short-lived access tokens (15 minutes) and refresh tokens (7 days).
We implement reasonable technical and organizational measures to protect your personal information. However, no method of electronic transmission or storage is 100% secure.
We retain your account and profile data for as long as your account is active. You may delete your account at any time, which will remove all associated data including your profile, work experience, skills, education, certifications, interests, job postings, resumes, and cover letters. When you delete your account, your data is removed from our active systems promptly and is purged from routine backups within 30 days.
We may retain a limited amount of information where required for legal, accounting, or fraud-prevention purposes (for example, records of payments and refunds), for as long as required by applicable law.
Uploaded resume files are processed in memory only and are not retained after extraction is complete.
We use browser local storage to maintain your authentication session. We do not use tracking cookies or third-party analytics at this time.
Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.
My Resume Robot is operated by LLnet Tech Services (LLnet-Inc), based in Cochrane, Alberta, Canada. If you have questions about this Privacy Policy, your personal data, or wish to exercise any of your rights (including under Canada's PIPEDA), contact us at:
Email: llnet-inc@myresumerobot.com
We will respond to privacy requests within a reasonable timeframe and in accordance with applicable law. If you are located in the EU/UK or California, you may have additional rights (such as access, portability, deletion, and the right to object); contact us and we will honour applicable requests.