Skip to main content
MyResumeKit

Legal

Privacy Policy

Last updated: September 7, 2026

MyResumeKit (“we,” “our,” or “the Service”) is a service of Macpherson Publishing, operating from Ontario, Canada, which is the data controller responsible for the information described in this policy. We are committed to protecting your privacy and complying with the Personal Information Protection and Electronic Documents Act (PIPEDA), the California Consumer Privacy Act (CCPA/CPRA), and the EU/UK General Data Protection Regulation (GDPR) where applicable. This policy explains what information we collect, how we use it, who we share it with, and the rights you have.

Information We Collect

Resume data: The resume information you enter (name, contact details, work history, education, skills, certifications, projects) is stored exclusively in your browser’s localStorage. It is not transmitted to our servers unless you choose to export your resume as a PDF.

Payment information: Payments are processed by PayPal. We do not receive or store your credit card or bank account details. PayPal returns a transaction confirmation and the email address you used at checkout, which we use to deliver your receipt.

Contact form submissions: When you submit our contact form, we collect the name, email address, category, and message you provide so we can respond to your inquiry.

Technical and usage data: Like most websites, our hosting provider Vercel automatically collects standard log data (IP address, browser type and version, device type, pages viewed, referring URL, timestamps) for every visit, regardless of any cookie choice. Separately, Google Analytics 4 measures a fixed list of anonymous interaction events (for example, opening the resume builder or scoring a check) — but only if you click Accept on the cookie banner. Before that click, no request is made to Google and no Google cookie exists on your device. The only descriptive values attached to any analytics event are a numeric ATS score and a resume template name — never your resume content, an uploaded file name, or your email address.

How We Use Your Information

  • To generate and deliver your PDF resume after a completed payment
  • To send a payment receipt to the email address you provide at checkout
  • To respond to support requests and contact form submissions
  • To measure aggregate, anonymized site usage and improve the product
  • To detect and prevent automated abuse, fraud, and bot traffic on our APIs
  • To comply with legal obligations and enforce our Terms of Service

Our Legal Basis for Processing

If you are in the EU or UK, the GDPR requires us to tell you which legal basis we rely on for each kind of processing. We rely on the following.

  • Performance of a contract — generating and delivering your PDF, emailing your receipt, and honouring your download window. You paid for a PDF; we cannot deliver it without processing the resume you wrote.
  • Consent — analytics, and only analytics. This is the one you are asked for explicitly on the cookie banner, and it is the only processing on this list you can switch off. Withdrawing it changes nothing else.
  • Legitimate interests — keeping the Service running and not overrun: server logs kept by our hosting provider, and the request metadata our abuse-protection provider inspects to block bots. Our interest is operating a working, non-abused website; we consider this to have minimal impact on you, and you can object using the contact details below.
  • Legal obligation — keeping records of completed payments for tax and financial record-keeping purposes.
  • Legitimate interests — responding to you when you write to us through the contact form. Our interest is answering the question you asked.

How We Share Your Information

We do not sell your personal information. We share data only with the third-party service providers listed below, and only to the extent necessary to operate the Service.

  • PayPal — processes all payments. We share with them only what is necessary to initiate a checkout. PayPal Privacy Policy.
  • Vercel — hosts our website and runs our serverless functions. Resume data passes through Vercel only when you generate a PDF. Vercel Privacy Policy.
  • Amazon Web Services (AWS) — receives contact form submissions through a Lambda function and delivers them to us via Amazon SES. The data shared is limited to what you submit in the contact form (name, email, category, message). AWS Privacy Notice.
  • Google Analytics 4 — anonymous, aggregate site-usage measurement, loaded only after you click Accept on the cookie banner shown on your first visit. Before that click, the Google Analytics script is not loaded at all and no request reaches Google’s servers. Once loaded, Google Analytics sets a first-party cookie called _ga to distinguish visitors. The only descriptive values we ever attach to an analytics event are a numeric ATS score and a resume template name — never your name, email address, resume content, an uploaded file name, or free text.If you complete a purchase and you have clicked Accept on the cookie banner, our server separately sends Google a record of the sale — the PayPal order identifier, the amount, and the currency — directly from our server rather than your browser, so the sale is still counted accurately even if a browser extension blocks the analytics script itself. This purchase record is only ever sent if you clicked Accept — if you clicked Decline, or have not yet made a choice, it is not sent. It never includes your email address, name, or resume content.You can decline or withdraw analytics consent for this site at any time — see Withdrawing consent under Your Rights below. As a secondary, browser-wide option, Google also offers the Google Analytics Opt-out Browser Add-on.
  • Resend — transactional email delivery provider. We use Resend to send your payment receipt to the email address you provide at checkout, with your finished resume attached as a PDF. Resend therefore processes the resume content in that PDF in the course of delivering the email. Resend Privacy Policy.
  • Arcjet — bot and abuse protection on our API endpoints. Arcjet inspects request metadata (IP address, headers) to detect and block automated abuse. No resume content is shared with Arcjet. Arcjet Privacy Policy.

Cookies and Local Storage

We use the following browser storage mechanisms:

  • localStorage for storing your resume data on your own device. This includes the resume you build at /builder, and also the resume our free ATS checker parses out of a file or pasted text at /check — every completed check stores that parsed resume on your device so it can be carried into the builder without retyping, even if you never open the builder. The parsed resume data itself never leaves your browser unless you export a PDF. (If you check a resume by uploading a PDF or DOCX file rather than pasting text, that file is sent to our server so we can read its text — the file itself is not stored by us, only used to extract the text.) The free ATS checker also keeps a short list of your recent ATS scores on your device, so it can show whether a later check improved — that list holds only the numeric scores and the time of each check, never any part of your resume, and it keeps at most five entries.
  • mrk_consent — a first-party cookie that records whether you clicked Accept or Decline on the cookie banner (value granted or denied). It expires after one year, contains no personal information, and exists solely so the banner does not reappear on every visit once you have made a choice.
  • mrk_internal — set only when the site owner deliberately visits with a special marker in the page URL. It excludes that browser’s own visits from our analytics data and has no effect for any other visitor.
  • Google Analytics cookies (_ga) — set by Google only after you click Accept, to distinguish visitors and measure site usage.

Data Retention

Resume data: Stored in your browser only, and cleared when you use the “Start New Resume” option or clear your browser storage — this clears the resume you are building, any copy kept from a free ATS check, and your recent ATS score list. We keep no copy on our own systems. If you export a PDF, that PDF is emailed to you — so a copy exists in your own inbox and, in the course of delivery, with our email provider Resend.

Payment records: We keep no customer database. A record of each completed sale (amount, date, PayPal transaction ID, payer email) reaches us as an email notification, and PayPal holds its own record of the transaction. We retain ours for up to 7 years in line with Canadian financial record-keeping requirements.

Contact form submissions: These arrive as email. We aim to delete them within 12 months of your inquiry, and you can ask us to delete yours sooner at any time using the contact details below.

Server logs: The standard request logs described above are held by our hosting provider, Vercel, for a short operational window — a matter of hours to a few days — and are then discarded. We do not export, copy, or separately store them.

Your Rights

Depending on where you live, you have specific rights regarding your personal information.

Canadian residents (PIPEDA)

  • The right to access the personal information we hold about you
  • The right to correct inaccurate or incomplete information
  • The right to withdraw consent for collection or use — see Withdrawing consent below for exactly how
  • The right to file a complaint with the Office of the Privacy Commissioner of Canada

California residents (CCPA/CPRA)

  • The right to know what personal information we collect and how we use it
  • The right to request deletion of your personal information
  • The right to correct inaccurate personal information
  • The right to opt out of the sale or sharing of your personal information (we do not sell or share personal information)
  • The right to non-discrimination for exercising these rights

EU and UK residents (GDPR)

  • The right to access (Article 15)
  • The right to rectification (Article 16)
  • The right to erasure / “right to be forgotten” (Article 17)
  • The right to restrict processing (Article 18)
  • The right to data portability (Article 20)
  • The right to object to processing (Article 21)
  • The right to lodge a complaint with your local supervisory authority

Withdrawing consent

If you previously clicked Accept on the cookie banner, you can withdraw that consent at any time: clear this site’s cookies in your browser (or delete just the mrk_consent cookie via your browser’s developer tools). The banner will reappear on your next visit so you can choose Decline. Declining, like accepting, changes nothing about the resume builder, checker, payment, PDF export, or email — consent gates measurement only.

To exercise any of these rights, contact us at contact@myresumekit.com. We will respond within 30 days for PIPEDA and GDPR requests, and within 45 days for CCPA requests, as required by the applicable law.

International Data Transfers

MyResumeKit is operated from Ontario, Canada, but our service providers (Vercel, Amazon Web Services, Google, Resend, Arcjet) are based primarily in the United States. By using the Service, you understand that your information may be transferred to, stored in, and processed in the United States. For personal data transferred from the EU or UK, we rely on the data processing agreements published by each of those providers, which incorporate the European Commission’s Standard Contractual Clauses and take effect when we accept that provider’s terms. You can read each provider’s own privacy policy through the links above.

Children’s Privacy

MyResumeKit is not intended for use by children under the age of 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us at contact@myresumekit.com and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after a change constitutes acceptance.

Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us at contact@myresumekit.com or via our contact form.