Privacy Policy
Last updated:
This Privacy Policy describes how Rezoomee ("we," "us," or "our") collects, uses, and protects your information when you use the Rezoomee website and services (the "Service"). By using the Service, you agree to the collection and use of your information as described here. For our terms of service, see our Terms of Service.
1. What We Collect
Account information
When you sign up, we collect your email address, your chosen subdomain, and your full name. If you sign in with Google, we receive your email address and name from Google as part of the OAuth flow.
Payment information
Payments are processed by Stripe. We do not store your full card number. Stripe shares with us a customer ID, your subscription status, and the last four digits of your card so we can surface billing state in your dashboard.
Resumes and photos
You may upload a PDF resume and a profile photo. These files are stored in our DigitalOcean Spaces bucket (US region) and the parsed contents are saved to your site record in our Supabase database (US region).
Usage data
We log basic technical information — IP address, browser type, request paths, and timestamps — for security, abuse prevention, and troubleshooting.
Advertising measurement
When you consent via our cookie banner, we load advertising-pixel scripts from Meta (Facebook) and LinkedIn on our marketing and dashboard pages. These pixels record page views and a small set of conversion events (such as signup completion and successful subscription) so we can measure how our ads on those platforms perform. We do not load these pixels on user-published sites (subdomains of rezoomee.com), and we do not load them at all unless you accept. You can withdraw consent at any time using the "Cookie preferences" link in the footer.
2. How We Use Your Information
- Operate the Service and provide your published site
- Parse your resume into structured data using our AI provider, and polish content when you request it
- Process subscription payments and manage your account
- Send transactional emails (account confirmations, billing notices, support replies)
- Detect, investigate, and prevent abuse or security incidents
- Comply with legal obligations
We do not sell your personal information for monetary value. With your consent, we share limited interaction data (page views and a small set of conversion events) with Meta and LinkedIn so we can measure the effectiveness of our advertising on those platforms — see the "Advertising measurement" section above. You can withdraw that consent at any time.
3. Third-Party Processors
We rely on the following service providers ("sub-processors") to deliver the Service. Their privacy practices are governed by their own policies.
- Supabase — authentication and database hosting (United States)
- DigitalOcean — application hosting and Spaces file storage (United States)
- Stripe — payment processing and subscription management
- Anthropic — AI processing of resume content for parsing and polishing
- Google — optional sign-in via Google OAuth
- Meta (Facebook) — advertising-effectiveness measurement via the Meta Pixel, only when you have accepted our cookie banner
- LinkedIn — advertising-effectiveness measurement via the LinkedIn Insight Tag, only when you have accepted our cookie banner
4. Data Residency
Your account data, uploaded files, and site content are stored on servers located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.
5. Data Retention
We retain your account data and User Content for as long as your account is active. After account deletion, we may retain some data for a reasonable period to comply with legal, tax, or accounting obligations, or to resolve disputes. Anonymized or aggregated data may be retained indefinitely.
6. Your Rights
Depending on where you live, you may have rights under laws such as the GDPR (European Economic Area, UK) or the CCPA (California), including:
- The right to access the personal data we hold about you
- The right to correct inaccurate personal data
- The right to request deletion of your personal data
- The right to export your data in a portable format
- The right to object to or restrict certain processing of your data
To exercise any of these rights, email support@rezoomee.com and we will respond within a reasonable timeframe.
7. Cookies
We use two kinds of cookies:
- Strictly necessary cookies — Supabase session cookies that keep you signed in, and a small cookie that remembers your choice in our cookie banner. These are always set and cannot be declined.
- Advertising cookies — set by the Meta Pixel and LinkedIn Insight Tag described above. These are only set if you click "Accept" in our cookie banner. They let Meta and LinkedIn attribute conversions to our ads. Decline the banner, or click "Cookie preferences" in the footer to withdraw a prior consent, and these cookies will not be set.
8. Security
We use industry-standard practices — TLS encryption in transit, encryption at rest for our database, restricted admin access, and regular dependency updates — to protect your information. No system is perfectly secure, however, and we cannot guarantee absolute security.
9. Children
The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will post the new version on this page and update the "Last updated" date above. Material changes will be communicated by email or in-app notice.
11. Contact
Questions or requests about this Privacy Policy? Email us at support@rezoomee.com.