Privacy Notice

Last updated: July 2, 2026

1. Who we are

ResumeFit is operated by Jimmy V John, an individual sole proprietor ("we", "us"). For the personal data you provide when using the service at jobresumefit.online (the "Service"), we act as the data controller.

2. Personal data we collect

  • Account data: name, email address, login credentials, and authentication provider identifiers.
  • Resume and job-description content: everything you upload or paste, including your work history, education, skills, and any personal details contained in those documents.
  • Analysis output: the ATS scores, strengths, weaknesses, and rewritten resume sections generated from your inputs.
  • Subscription and billing metadata: subscription status, plan, renewal dates, and billing region (payment card and tax details are collected by Paddle, not by us).
  • Support communications: messages you send us for support or feedback.
  • Usage and device data: IP address, browser type, device identifiers, pages visited, and interaction telemetry, collected via server logs and analytics.

3. Why we use your data and legal basis

  • Provide the Service — creating your account, running resume analysis, generating downloads. Legal basis: performance of contract.
  • Send AI requests — your resume and job description are sent to our AI provider so we can produce the analysis you requested. Legal basis: performance of contract.
  • Payments and subscription management — via Paddle, our Merchant of Record. Legal basis: performance of contract; legal obligation.
  • Security and fraud prevention — protecting the Service and our users. Legal basis: legitimate interests.
  • Service improvement — understanding usage patterns to make the product better. Legal basis: legitimate interests.
  • Customer support — responding to your questions. Legal basis: performance of contract; legitimate interests.
  • Legal compliance — meeting tax, accounting, and other legal obligations. Legal basis: legal obligation.

4. Who we share your data with

  • Merchant of Record: Paddle.com Market Limited, which handles the sale of our subscriptions, payment processing, tax compliance, invoicing, refunds, and subscription management.
  • Cloud hosting and database provider: our backend and database are hosted on managed cloud infrastructure.
  • AI provider: resume and job-description text is sent to a third-party large-language-model provider (accessed via our AI gateway) so we can generate the analysis you requested.
  • Analytics and error-monitoring providers: to understand usage and diagnose issues.
  • Authorities: where we are legally required to disclose data.
  • Professional advisers: legal, accounting, and tax advisers where necessary.

We do not sell your personal data.

5. International transfers

Some of our service providers are based outside your country of residence, including in the United States and the European Union. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We retain your account data and resume/analysis content for as long as your account is active, and for a reasonable period after closure to comply with legal obligations, resolve disputes, and enforce our agreements. Billing records are retained by Paddle for the periods required by applicable tax law. You may request deletion of your account and associated content at any time (see "Your rights").

7. Your rights

Depending on where you live, you may have the right to access, rectify, erase, restrict, or object to processing of your personal data; to data portability; to withdraw consent; and to lodge a complaint with a supervisory authority. Under GDPR we aim to respond within one month. To exercise any of these rights, contact us via the contact link in the site footer.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and secure authentication — to protect your personal data. No system is 100% secure; we cannot guarantee absolute security.

9. Cookies

We use essential cookies required for authentication and to remember your session. We may use limited analytics cookies to understand usage. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.

10. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated via the Service or by email.

12. Contact

For privacy questions or to exercise your rights, contact Jimmy V John via the contact link in the site footer.