Privacy Policy

1. Introduction

Welcome to Resmly. Resmly is a product owned and operated by Akkadia Nexus LLC, a Texas-based limited liability company, United States. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our AI-powered resume and cover letter generation service.

2. Information We Collect

2.1 Information You Provide

• Account information (email address, password)
• Profile data (name, contact information, location)
• Professional information (work experience, education, skills, certifications)
• Job application details (company names, job descriptions, hiring manager information)
• Resume and cover letter content you create

2.2 Automatically Collected Information

• Usage data (features used, time spent, pages visited)
• Device information (browser type, operating system)
• IP address for security and fraud prevention purposes
• Information stored in your browser, described in section 10 (no cookies or tracking technologies)

3. How We Use Your Information

• Generate personalized resumes and cover letters using AI
• Analyze job descriptions and match them with your profile
• Provide ATS score analysis and optimization suggestions
• Maintain your application history and saved documents
• Track usage limits for free and paid plans
• Send service-related emails and notifications
• Improve our service quality
• Prevent fraud and ensure platform security
• Comply with legal obligations

4. AI Processing and Data Usage

We use AI models from Anthropic (Claude) and OpenAI (GPT) to read your uploaded resume and to generate and optimize your resumes and cover letters. Your data is sent to these providers over secure, encrypted API connections and is used only to perform the task you request. We do not use your personal information to train third-party AI models without your explicit consent. Your data is only used to provide you with personalized resume and cover letter generation services. The free match check on our homepage works without an account: the job posting and resume text you paste or upload there are sent to Anthropic only to produce your result, and we do not store either text. To enforce daily limits, we count checks per visitor using a one-way hash of your IP address that changes every day; the IP address itself is not stored.

5. Third-Party Services

Resmly uses the following third-party services to provide and improve our platform:

• Anthropic: AI resume parsing and content generation
• OpenAI: AI content generation and processing
• Supabase: Secure database hosting and authentication
• Resend: Email delivery service
• Stripe: Payment processing (when applicable)

Each service provider has their own privacy policy and security practices. We carefully select providers that meet high security and privacy standards.

6. Data Sharing and Disclosure

We do not sell your personal information to third parties. This is a firm commitment. We may share your data only with:

• Service Providers: Supabase (database hosting), Anthropic and OpenAI (AI processing), Resend (email delivery), payment processors (when applicable)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In the event of a merger or acquisition

7. Data Security

We implement industry-standard security measures including:

• Encryption in transit (HTTPS/TLS) and at rest
• Row-level security policies on database
• Regular security audits and updates
• Access controls and authentication
• Secure password hashing
• IP address logging for security monitoring

8. Your Rights and Account Deletion

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and all associated data permanently
• Export your data in a portable format
• Opt-out of marketing communications
• Object to data processing in certain circumstances

To delete your account, visit Account Settings in your profile. Account deletion is permanent and irreversible. You will receive a confirmation email upon completion.

9. Data Retention

We retain your data as long as your account is active or as needed to provide services. Upon account deletion, we permanently remove:

• Your profile information
• All resumes and cover letters
• Application history
• Usage records

Deletion logs are retained for compliance and audit purposes only. You can request deletion at any time by contacting us at contact@resmly.com or using the account deletion feature in your profile settings.

Fraud prevention after deletion: when an account is deleted, we retain a one-way cryptographic fingerprint (SHA-256 hash) of the account email address for 3 months. This fingerprint cannot be reversed into the email address. It is used solely to prevent the same email from re-registering during that period to obtain additional free credits, and it is automatically purged after 3 months. This is also described in our Terms of Service and in the account deletion dialog.

Payment records: transaction records required for tax and accounting purposes are retained as required by law. Payment card details are processed and stored by Stripe — we never receive or store your card number.

10. Cookies and Browser Storage

Resmly does not use cookies or advertising trackers. To make the site work, it saves a few small items in your browser's local storage:

• Your login session, so you stay signed in (essential).
• The time of your last activity, so we can sign you out automatically after 15 minutes without activity (essential, for security).
• Whether you closed the getting-started guide.
• A referral or promo code from a link you followed, so the matching credits can be applied when you sign up.
• Where your first visit came from: the referring website, any campaign tags in the link (utm parameters), the first page you landed on and when. If you create an account, this is saved with your account once, so we can see which channels bring people to Resmly. It is never used for advertising and never shared.

To count page views, the site uses Cloudflare Web Analytics. It is cookieless, stores nothing in your browser and does not identify or follow individual visitors; it records aggregate visits such as which pages were viewed, the referring website and the country.

The footer shows badges from directories that list Resmly. Those images load from the directories' own websites, which, like any website an image is loaded from, receive your IP address.

You can remove these items at any time by clearing your browser's site data for resmly.com. This will sign you out.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

12. Children's Privacy

Our service is not intended for individuals under 16 years of age. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or through the platform. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Governing Jurisdiction

This Privacy Policy is governed by the laws of the State of Texas, United States. Any disputes arising from this policy shall be resolved in the courts of Texas.

15. GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under GDPR including the right to lodge a complaint with your local data protection authority.

16. CCPA Compliance (California Users)

California residents have specific rights under the CCPA, including the right to know what personal information is collected and the right to opt-out of the sale of personal information. We do not sell personal information.

17. Contact Us

For privacy-related questions or to exercise your rights, contact us at: