Privacy Policy

Introduction

Welcome to Reztune. We provide AI-powered resume customization services tailored to assist individuals in optimizing their job applications. This Privacy Policy outlines how we collect, use, share, and safeguard your personal data when using our services. This policy complies with both the General Data Protection Regulation (GDPR), as established under EU law, and the necessary California Consumer Privacy Act (CCPA) provisions to account for our predominantly US-based user base.

Information We Collect

Personal Data

We collect the following personal information from our users in order to provide our services:

• Contact Details: Name, email address, telephone number, and postal address.
• Professional Information: Employment history, educational background, skills, certifications, and job preferences used to tailor your AI-generated resume.
• Job Application Details: Specific details related to the jobs you are interested in, such as your job preferences and the data required for job applications.
• Assessment Data: Responses to assessments or questionnaires that help us better tailor resumes for certain roles or industries.

Usage Data

We collect non-personally identifiable information, including:

• Technical Information: IP addresses, browser type and version, time zone settings, and operating system to ensure the functionality of our service.
• Interaction Data: Pages visited, links clicked, and other interactions with our service to personalize our offerings and improve the user experience.
• Analytics Data: We use PostHog, a third-party analytics provider, to track usage patterns, monitor performance, and improve our service. PostHog may collect event data tied to anonymized session tracking.

You can opt out of analytics tracking by adjusting your cookie settings or enabling Do Not Track (DNT) in your browser. (See "Your Rights and Choices" below).

How We Use Your Information

We process the data we collect for the following purposes:

• To provide and operate our AI-powered services (e.g., resume creation and customization).
• To improve our service with personalized suggestions based on your professional information.
• To conduct research and develop new features and functionalities.
• To communicate important notifications, customer service responses, and updates directly to you.
• To comply with legal obligations, detect fraudulent activity, and safeguard the integrity of our platform.

Legal Bases for Processing (For European Economic Area Users)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Consent: When you provide your consent to collect and use your personal data.
• Contractual Obligation: To fulfill services as agreed upon in our Terms & Conditions.
• Legitimate Interest: To ensure the functionality and efficiency of our service, prevent fraud, and improve our offerings.
• Legal Compliance: When necessary to meet regulatory or legal obligations.

Sharing Your Information

We may share your information with third parties in specific situations, such as:

• Service Providers: We collaborate with third-party vendors for services like cloud hosting, email processing, payment facilitation, and PostHog for analytics. These providers are contractually bound to protect your data in compliance with GDPR and other applicable regulations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data might be included in such transactions. Transfers will strictly adhere to applicable data protection laws.
• Consent-Based Sharing: We will always ask for your explicit consent before sharing your personal data for purposes outside of this policy.

Please note that Reztune does NOT sell your personal information, in compliance with California Consumer Privacy Act (CCPA) regulations concerning the sale of personal data among US users.

International Data Transfers

Given that most of our users are US-based, we may transfer your personal data to countries outside the EEA, including the US. Any such transfer will be compliant with GDPR standards, and where necessary, we will rely on standard contractual clauses or adequacy decisions for data protection. PostHog and other cloud-based providers may process data across various jurisdictions, but they must comply with applicable privacy laws.

Data Retention and Security

We retain personal information only for as long as necessary to provide our service or fulfill our legal obligations, including dispute resolution and enforcing our policies. Security measures include encryption technologies, administrative safeguards, and regular audits to protect your data from unauthorized access or exposure.

Preventing Abuse and Fraud

To protect the integrity of our services and prevent abuse we retain a hashed and salted user identifier even after you delete your account.

This retained data:

• Cannot be used to identify you directly, as we do not store your actual email or any other personal data linked to the hash.
• Is stored solely for the purpose of preventing abuse.
• Is protected with strong cryptographic techniques and access controls.

This processing is based on our legitimate interest (GDPR Art. 6(1)(f)) in maintaining the fairness and security of our platform. Under the CCPA, this retention qualifies as necessary to detect and prevent fraudulent or illegal activity (Cal. Civ. Code §1798.105(d)).

If you have questions or concerns about this processing, or wish to contest it, you may contact us at [email protected].

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance the functionality, security, and performance of our platform. For more details on the types of cookies we use and how to manage your preferences, please see our Cookie Policy.

Your Rights and Choices

If you're located in the EU or governed by GDPR, you have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccuracies within any stored personal data.
• Erasure: Request deletion of data when no longer needed for its initial purpose or upon withdrawal of consent.
• Data Portability: Receive a machine-readable copy of your personal information or request its transfer to another data controller.
• Restriction and Objection: Restrict or object to data processing practices under certain conditions.

For residents of California, you may also exercise rights under the CCPA, such as:

• The right to access the specific pieces of personal data we collect about you.
• The right to request deletion of your personal data.
• The right to opt out of data sharing for purposes deemed as "sales" under CCPA, though Reztune does not sell personal data.

We are committed to responding to user requests within one month or as required under applicable laws. To exercise your rights, please contact us at [email protected].

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our services or legal obligations. If we make significant updates, we will notify you by email or via an in-app prompt and update the "Effective Date" at the top of this policy.

Contact Us

If you have any questions or concerns about this Privacy Policy, please feel free to contact us at:

Email: [email protected]

Thank you for choosing Reztune, we're committed to protecting your privacy.

© 2025 Hirelens Limited, All rights reserved.