Privacy Policy

Last updated: 8.6.2025

1. Introduction

This Privacy Policy explains how Resomae ("we," "our," or "us") collects, uses, and protects your personal information when you use our AI-powered cover letter generation service.

2. Information We Collect

Personal Information

  • Email address: Used for account creation, login, and important notifications
  • Account usage data: Number of cover letters generated, text improvements made, and interest in premium features

Content You Provide

When using our service, you may provide:

  • CV/resume content
  • Job descriptions
  • Writing samples
  • Text for AI improvements

Important: We do not store this content after your session ends. This information is only sent to our AI service provider (Google Gemini) for processing.

Technical Information

  • We store generation metadata (token usage, AI model used, processing costs)
  • We store bug reports (when you choose to submit them)
  • We log document text length (to prevent abuse)

3. How We Use Your Information

We use your information to:

  • Provide and maintain our service
  • Process your AI generation requests
  • Improve our service through bug reports and usage analytics
  • Communicate important updates about your account

4. Data Processing Legal Basis (GDPR)

  • Contractual necessity: Processing your email and usage data to provide our service
  • Legitimate interest: Processing bug reports and usage analytics to improve our service

5. Third-Party Services

Google Gemini AI

Your content (CV, job descriptions, writing samples) is sent to Google Gemini for AI processing. This data is subject to Google's privacy policy and terms of service.

Supabase

We use Supabase for authentication and database services. Your email and account data are stored on Supabase servers located in London, UK.

Vercel

Our application is hosted on Vercel, which processes standard web traffic data.

Vercel Analytics

We use Vercel Web Analytics to understand how visitors use our website. This service collects anonymous usage data including page views, referral sources, and basic technical information. No personal identifiers are collected, no cookies are used for tracking, and all data is aggregated and cannot be used to identify individual users.

6. Data Retention and Deletion

  • Your account data is retained while your account remains active
  • You can delete your account and all associated data instantly from your dashboard
  • Upon deletion, all your data is permanently removed from our systems

7. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, particularly when using Google Gemini's AI services. These transfers are conducted in accordance with applicable data protection laws.

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Delete your account and data (available in your dashboard)
  • Restrict processing under certain conditions
  • Request data portability
  • Object to processing based on legitimate interests

To exercise these rights, use the account deletion feature in your dashboard or contact us at info@resomae.com.

9. Security

We implement appropriate security measures and rely on our trusted service providers (Supabase and Vercel) for infrastructure security, including encryption and access controls.

10. Age Requirement

You must be 18 years or older to use Resomae.

11. Cookies

We only use essential cookies for authentication and session management. No tracking or analytics cookies are used.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email to your registered address.

13. Contact Us

For any questions about this Privacy Policy, contact us at info@resomae.com.


This policy is governed by UK data protection laws, including UK GDPR and the Data Protection Act 2018.