Privacy Policy
Last updated: July 6, 2026
This Privacy Policy explains how ResumeAI (MLStudios)("we", "us") collects, uses, and protects your information when you use ResumeAI (the "Service"). By using the Service you agree to this policy.
Information we collect
- Account data: your email address (and authentication metadata) when you create an account. Authentication is handled by our provider, Supabase.
- Résumé content: everything you enter or import into the editor (name, contact details, work history, education, skills, etc.). You control this content and can edit or delete it at any time.
- Payment data: if you subscribe, payments are processed by Razorpay. We do not receive or store your full card details — only a subscription reference and status.
- Technical data: essential cookies for your login session, and standard server logs (e.g. IP, request metadata) used for security and rate limiting.
How we use your information
- To provide the Service — building, saving, and exporting your résumés.
- To power optional AI features (see below).
- To process subscriptions and manage entitlements.
- To secure the Service, prevent abuse, and comply with law.
We do not sell your personal data.
AI processing
When you use an AI feature (bullet rewriting, summary, job-description tailoring, cover letters, or AI import), the relevant résumé text is sent to our AI provider (Groq) to generate the output and returned to you. Use of these features is optional. Please review your provider's terms for how they handle submitted content.
Service providers (sub-processors)
- Supabase — authentication, database, and file storage.
- Groq — AI text generation for optional AI features.
- Razorpay — subscription payments.
- Our hosting provider — serving the application.
Data retention and deletion
We keep your résumés and account data until you delete them. You can delete individual résumés in the dashboard, or permanently delete your entire account (and all associated data) from Settings → Account. You can also export your résumé data as JSON at any time.
Security
Data is transmitted over HTTPS. Access to your data is scoped per user via database row-level security, and connector tokens are stored only as hashes. No system is perfectly secure, but we take reasonable measures to protect your information.
Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data. You can exercise most of these directly in the app, or contact us at support@mlstudiosapp.com.
Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.
Contact
Questions about privacy? Email support@mlstudiosapp.com.