Privacy Policy

1. Who we are

Resumeflow-ATS is a resume builder and job-application tracker. It helps you create tailored resume versions, track the jobs you apply to, and prepare for interviews. The Service is designed so that the content you create is stored in your own Google Drive rather than in a database we control.

2. Information we collect

We collect only what is needed to run the Service:

• Account profile. When you sign in with Google we receive your name, email address, and profile picture. When you sign in with Apple we receive only your name and email address (which may be Apple’s private relay address if you choose “Hide My Email”). This is used to identify you, display your account in the app, and secure your session.
• Content you create. Resumes, job applications, notes, interview questions and answers, and related status history. As described below, this content is stored in your own Google Drive.
• Aggregate usage analytics. We keep anonymous, aggregate counts of certain actions (for example sign-ins, resumes created, applications created, exports, and AI tailoring runs). These counters never include your name, email, resume text, job descriptions, IP address, or device details. To count distinct users and approximate geography we store a salted, non-reversible token derived from your account id and a two-letter country code derived from your connection’s region header. We do not store your IP address.

3. Google Drive and the appdata folder

Resumeflow-ATS does not store your content on its own servers. When you sign in with Google — or connect a Google Drive after signing in with Apple — we request the drive.appdata permission. This is a restricted scope that grants access only to a hidden, application-specific folder in your Google Drive (“appDataFolder”). We use it to read and write the JSON files that hold your Resumeflow-ATS content.

• We cannot see, read, or modify any of your other Google Drive files, photos, or documents.
• Your content stays in your Google Drive under your control. If you stop using the Service you can delete that app-data folder from your Google account at any time.
• Resumeflow-ATS’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. AI features

When you use AI-powered features — tailoring a resume to a job description, importing an existing resume, or generating interview questions — the relevant text you provide (such as your resume content and the job description) is sent to a third-party AI provider (OpenRouter, Inc. and the underlying model providers it routes to, such as OpenAI) to generate the result. We send only the text necessary for the requested task. We do not use your content to train our own models.

• Nothing is sent without your permission. Before the first AI request on your account, the app shows a consent dialog explaining what will be sent and to whom, and AI features stay disabled until you agree.
• You can withdraw this permission at any time in Settings → AI data sharing; AI features stop sending data immediately.
• OpenRouter processes requests as our service provider and is contractually bound to equivalent data protections; see the OpenRouter privacy policy.

5. How we use your information

• To authenticate you and keep your session secure.
• To store, display, and let you manage the content you create.
• To provide AI-assisted resume and interview features.
• To understand aggregate usage so we can maintain and improve the Service.

We do not sell your personal information or use it for advertising.

6. Service providers

We rely on a small number of service providers to operate the Service:

• Google — sign-in and Drive storage of your content.
• Vercel — application hosting and delivery.
• OpenRouter and its model providers — processing AI feature requests.

These providers process data only to perform services for us and are subject to their own privacy terms.

7. Data retention and deletion

Your content remains in your Google Drive app-data folder until you delete it. You can remove individual items inside the app, delete the app-data folder from your Google account, or revoke Resumeflow-ATS’s access at myaccount.google.com/permissions. Aggregate analytics counters contain no personal information and are retained in anonymized form.

8. Security

We use industry-standard measures including encrypted connections (HTTPS) and OAuth-based authentication. No method of transmission or storage is completely secure, but we work to protect your information and limit the data we hold.

9. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact us

If you have questions about this Privacy Policy or your data, contact us at devteamprayaga@gmail.com.