Privacy Policy

Privacy Policy

OptiResume.online – Jobseeker Services

Last Updated:

1. Overview

OptiResume.online respects your privacy. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use our jobseeker services.

Our core principle is simple:

Optimized résumés saved in your private dashboard are available for 3 days (72 hours) from the first save, then are removed automatically. You can reopen or download them during that period. Editing does not extend the expiry.

2. Information We Collect

We collect personal information needed for account access and optional candidate visibility features:

  • Name
  • Email address

In addition to account data, if you choose to store your optimized resume for recruitment visibility, we store your selected position, country, locale, resume style, and the resume content you submit (which may include work history, skills, education, and contact details contained in the resume text).

Saved dashboard copies may include your original and optimized résumé, target job description, scores, formatting, photo and edits.

By default, we do not retain:

  • IP addresses
  • Device or browser information
  • Analytics data

3. How Your Information Is Used

Your account data and optional stored resume profile are used only for:

  • Account authentication (email login or Google authentication via Supabase)
  • Account confirmation email during signup
  • Account management and, if you opt in, candidate profile visibility in the Candidates Database for approved recruiter/hiring-manager access
  • Payment processing (via Stripe)

We may occasionally send emails when we have relevant or interesting updates about OptiRésumé features and services.

4. AI Processing & Data Storage

When you use jobseeker AI tools, including resume and cover letter tools, job matching, career and LinkedIn guidance, and voice interviews:

  • Content is processed in real time.
  • Optimized résumés saved in your private dashboard are available for 3 days (72 hours) from the first save, then are removed automatically.

Unsaved on-screen content can disappear when:

  • You refresh the page
  • You leave the page
  • The session ends
  • The system resets after inactivity

5. Support Messages

If you contact support:

  • Messages may be temporarily accessible for review.
  • Messages are removed within 24 hours after being read.

6. Third-Party Services

We use the following service providers:

  • Supabase – Authentication and account management
  • Stripe – Payment processing
  • OpenAI, Google (Gemini), DeepSeek, Alibaba Cloud (Qwen), xAI (Grok), Moonshot AI (Kimi), Anthropic (Claude) – AI processing
  • DigitalOcean – Hosting infrastructure

Payments are processed securely by Stripe.

AI Data Sharing

OptiRésumé uses third-party AI services for résumé creation, analysis and optimization, job matching, career guidance, LinkedIn content, company research, and interview practice.

What information is shared?

Depending on the feature you use, we may send your résumé, contact details contained in your submitted content, job descriptions, LinkedIn or career information, written answers, voice recordings, transcripts, and other information you provide to that feature.

Who receives this information?

By agreeing, you authorize OptiRésumé to send relevant information to the following companies when needed to process your request:

  • OpenAI
  • Google (Gemini)
  • DeepSeek
  • Alibaba Cloud (Qwen)
  • xAI (Grok)
  • Moonshot AI (Kimi)
  • Anthropic (Claude)

The providers used may vary by feature, language, and configuration. A provider may process your request directly, handle a fallback, or review an AI-generated response together with relevant source information.

Not every request is sent to every provider. Your permission covers all listed companies, including those enabled later.

Your choice

Consent is optional. If you decline, AI processing and text entry, pasting, and file uploads within AI tools remain disabled. You can still access Settings, your account, support, and the privacy policy.

You can give or withdraw consent at any time in Settings → AI Data Sharing. Withdrawal stops future AI processing; it does not recall information already transmitted.

We save your choice with your account, including the notice version, covered companies, language, date, and consent history. Your choice is remembered on later visits. We ask again before sharing with a company outside this list or making a material change to the disclosed data or purposes. Administrators can view your consent status but cannot consent on your behalf.

Optional D-ID talking video

Optional talking-avatar video uses D-ID. We send the virtual interviewer’s stock portrait and generated speech audio, which may contain details from your résumé, to create lip-synced video.

This requires separate permission. Declining keeps voice-only interviews available. You can withdraw this permission in Settings → AI Data Sharing.

Providers’ privacy and retention terms apply to transmitted information. Retention and deletion periods depend on the service, its configuration and applicable requirements. See the providers’ terms below.

Third-Party AI Data Protection

Sources reviewed:

AI features may send the content described above to a selected provider, a second reviewer or a fallback provider. Connections use HTTPS encryption. These summaries concern the integrated API services, not consumer chat apps. Provider retention is separate from our own storage and deletion periods.

OpenAI

OpenAI’s API does not use inputs or outputs for model training by default; optional data sharing changes this. Its data-processing agreement includes confidentiality and security duties. Abuse logs may be kept for up to 30 days, with legal or safety exceptions; storage also varies by endpoint and feature. Zero retention requires approval and eligible features and has not been verified for our account.

Google (Gemini)

We use Google’s Gemini Developer API. With active Cloud Billing, prompts and responses are not used to improve Google’s products, and its processor agreement includes security and confidentiality duties. Unpaid services may use content for training and human review; Google prohibits personal or confidential data in that tier. Abuse logs are kept for 55 days; Search grounding data for 30 days. Our billing, optional sharing and storage settings remain unverified.

DeepSeek

DeepSeek’s Open Platform terms do not establish an API-specific no-training commitment or deletion deadline for our users. Its general privacy policy describes security measures, model training and storage in China, but excludes downstream end-user processing rules. Equivalent API confidentiality, training and retention protections have therefore not been verified; further contractual evidence is needed.

Alibaba Cloud (Qwen)

Alibaba Cloud Model Studio documents encrypted processing and no model training without separate consent; its applicable data-processing agreement requires confidentiality. Standard inference retention is up to 30 days, with legal or security exceptions; stateful features may remain until deleted. Location depends on region and deployment scope: a Singapore endpoint does not mean Singapore-only inference. Zero retention requires eligible enterprise workspaces and models and has not been verified for our account.

xAI (Grok)

The Grok API publishes no training without permission and ordinary 30-day abuse-monitoring retention. Its current terms (SpaceXSI) include security and confidentiality duties and require the zero-retention API for personal data. That account configuration has not been verified. Use of the standard API address alone does not establish zero retention.

Moonshot AI (Kimi)

Moonshot AI Pte. Ltd.’s international Kimi API policy describes encryption, restricted access and Singapore storage. Its terms allow content to train or improve models unless a separate written agreement restricts this. Retention depends on purpose and can last while an account remains active; deletion may be requested. A no-training agreement, fixed API deletion deadline and processor agreement have not been verified for our account.

Anthropic (Claude)

Anthropic’s commercial Claude API terms prohibit model training on customer content, and its data-processing agreement includes confidentiality and security duties. Its commercial retention policy provides for deletion of inputs and outputs within 30 days, subject to longer legal, safety and model-specific retention. Zero-retention arrangements have feature and model restrictions and have not been verified for our account.

D-ID

The optional D-ID talking-avatar API receives an app-provided portrait and generated interviewer audio, which may include résumé context. D-ID describes security safeguards and US storage. Its policy provides for commercially reasonable efforts to delete nonpersistent API media within 24 hours, with no training access while stored. Persistent uploads and other products differ. App requests to delete generated talks are best-effort; complete erasure and our account’s processor agreement have not been verified.

These summaries do not confirm identical protection or zero retention across all providers. Closing a page or deleting an OptiRésumé account does not itself erase provider-held records. For privacy or deletion requests, contact admin@optiresume.online.

Other Third-Party Data Protection

Sources reviewed:

These services support accounts, storage and payments alongside the AI providers above. The data received depends on the features you use.

Supabase

Supabase provides authentication, databases and file storage. It receives account and sign-in details, stored resumes, screening records, consent choices, activity and purchase/credit records. Its DPA limits processing to customer instructions and documents confidentiality, TLS and encryption at rest. Deletion is available through service controls; backup retention depends on the plan and settings. Our production region, access policies and backup configuration have not been independently verified.

DigitalOcean (Spaces)

Where DigitalOcean Spaces storage is enabled, it receives screening camera/audio and screen recordings with file identifiers for storage and playback; it can also host prerecorded help audio. Its DPA provides confidentiality and processing under customer instructions. Spaces documents HTTPS/TLS and encryption at rest. File permissions, deletion and lifecycle settings remain our responsibility; production bucket access, region and retention have not been verified. Local-file storage does not send these files to Spaces.

Stripe

For Stripe web checkout, we send your email, account identifier and purchase details. Stripe collects payment/billing and device information to process payments and prevent fraud. It documents TLS, encrypted card storage and access controls. Its DPA covers processing on our instructions where applicable; Stripe also acts independently for fraud prevention, legal compliance and other stated purposes. Financial and fraud-prevention records may remain after account deletion, depending on law and payment-method requirements.

Apple

Apple handles Sign in with Apple and native iOS purchases. It receives account/device and purchase information plus an app-specific account token linking purchases to your account. We receive sign-in identifiers, any name/email you share (including a relay address), and signed transactions. Apple documents security safeguards and privacy choices; it also uses store activity for fraud prevention and personalization under its settings. Purchase records have long, region-dependent legal retention periods; deleting our app account does not delete your Apple records.

These summaries do not establish identical protection across providers. App-account deletion may not immediately remove provider backups or legally retained records. For questions or deletion requests, contact admin@optiresume.online.

7. Data Retention

Account information (name and email) remains active while your account exists.

You may delete your account at any time.

Once deleted, your account information is permanently removed.

Optimized résumés saved in your private dashboard are available for 3 days (72 hours) from the first save, then are removed automatically. You can reopen or download them during that period. Editing does not extend the expiry.

8. Security

We use:

  • HTTPS encryption
  • Secure authentication via Supabase
  • Secure payment processing via Stripe

We take reasonable technical measures to protect account data.

9. International Users (Including EU)

OptiResume.online operates from Canada and is available to users globally, including the European Union.

By using the service, you consent to data processing in accordance with this Privacy Policy.

If you are located in the EU, you have the right to:

  • Request access to your personal data
  • Request correction
  • Request deletion of your account

10. Age Restriction

This service is intended for individuals 18 years or older.

11. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be reflected by the “Last Updated” date above.

12. Contact

For privacy-related requests, contact:

admin@optiresume.online