Legal
Privacy Policy
How ResumeGuard collects, uses, stores, and protects the data you entrust to our resume screening service.
Last updated: July 9, 2026
1. What We Collect
When you use ResumeGuard, we collect the following information:
• Account information: email address, name, and password (hashed with bcrypt) • Screening reports: scores, flags, and structured résumé information extracted during analysis (stored in Postgres as part of your report) • Usage data: number of resumes screened, timestamps, billing tier, and API usage • Session data: authentication cookies for logged-in users and anonymous free-check sessions • Contact form submissions: name, email, and message content when you reach out via /contact
2. How We Use Your Data
We use your data solely to provide the resume screening service:
• Analyze uploaded resumes for fraud indicators using AI models and deterministic verifiers • Verify employer, education, and credential claims against public web sources • Generate risk scores, evidence flags, interview questions, and downloadable reports • Authenticate accounts, issue API keys, and track usage for billing • Measure ad performance when visitors click Add payment method and when they complete billing setup (Google Ads conversion tracking on the public site only)
We do not sell, share, or provide your data to third parties for marketing purposes.
3. Third-Party Services
ResumeGuard uses the following third-party services to process resumes and operate the platform:
• xAI — LLM-based resume fact extraction • Resend — transactional email (verification codes, welcome mail, contact form delivery) • Stripe — payment method storage and usage-based billing (when enabled) • Google Ads (Google tag) — conversion measurement on our marketing website when a visitor completes billing setup after clicking an ad; we pass the Stripe checkout session id as a transaction reference, not resume or candidate data • Serper or other search APIs (optional) — public web verification of employers and LinkedIn profiles • PostgreSQL hosting — account, usage, and knowledge-base storage
Resume text is sent to AI and search providers for analysis. We do not store resume content on third-party servers beyond the duration of the API call. Google may set cookies or use similar technologies for ad conversion measurement as described in Google's privacy policy. A complete list of sub-processors is available to enterprise customers upon written request.
4. Data Retention
We retain screening reports and structured résumé information in your account — scores, flags, and facts extracted during analysis. We do not keep the original uploaded file after processing. Full résumé text is not stored as a separate database field.
By default, paid account screenings are kept until you delete them. In your dashboard you can set automatic deletion after 30, 90, 180, or 365 days, use Remove history to remove all reports, or delete individual reports via the API. Anonymous free checks may be stored temporarily for abuse prevention. You can also request full account deletion by contacting hello@resumeguard.io; associated data is permanently removed within 30 days.
5. Data Security
We protect your data using:
• TLS encryption for all data in transit • bcrypt password hashing • Server-side sessions and API key authentication • Rate limiting and input validation to prevent abuse • Tenant isolation — your data is not accessible to other organizations
6. Your Rights
You have the right to:
• Access data we hold about you • Request correction of inaccurate data • Request deletion of your account and data • Export your screening reports (via API or PDF download)
7. Cookies and Similar Technologies
ResumeGuard uses:
• Session cookies — authentication and anonymous free-check session tracking (required for the service) • Google Ads conversion tags — on our public marketing site (production only), to record when someone clicks Add payment method or completes billing setup after an ad click; these are set by Google and may include advertising or analytics cookies as defined by Google
We do not use third-party advertising or analytics cookies for any other purpose. We do not run site-wide behavioral advertising, retargeting, or cross-site tracking beyond this single conversion event. You can control Google ad personalization through Google's Ads Settings and your browser's cookie controls.
8. Contact
For privacy-related questions or data requests, contact us at hello@resumeguard.io.
See also our Terms of Service.