Skip to main content
MyResumeKit

Legal

Privacy Policy

Last updated: April 14, 2026

MyResumeKit (“we,” “our,” or “the Service”) is operated from Ontario, Canada. We are committed to protecting your privacy and complying with the Personal Information Protection and Electronic Documents Act (PIPEDA), the California Consumer Privacy Act (CCPA/CPRA), and the EU/UK General Data Protection Regulation (GDPR) where applicable. This policy explains what information we collect, how we use it, who we share it with, and the rights you have.

Information We Collect

Resume data:The resume information you enter (name, contact details, work history, education, skills, certifications, projects) is stored exclusively in your browser’s localStorage. It is not transmitted to our servers unless you choose to export your resume as a PDF.

Payment information: Payments are processed by PayPal. We do not receive or store your credit card or bank account details. PayPal returns a transaction confirmation and the email address you used at checkout, which we use to deliver your receipt.

Contact form submissions: When you submit our contact form, we collect the name, email address, category, and message you provide so we can respond to your inquiry.

Technical and usage data: Like most websites, we automatically collect standard log data (IP address, browser type and version, device type, pages viewed, referring URL, timestamps) and aggregate analytics events (page views, clicks). This data is collected by Google Analytics 4 and our hosting provider Vercel.

How We Use Your Information

  • To generate and deliver your PDF resume after a completed payment
  • To send a payment receipt to the email address you provide at checkout
  • To respond to support requests and contact form submissions
  • To measure aggregate, anonymized site usage and improve the product
  • To detect and prevent automated abuse, fraud, and bot traffic on our APIs
  • To comply with legal obligations and enforce our Terms of Service

How We Share Your Information

We do not sell your personal information. We share data only with the third-party service providers listed below, and only to the extent necessary to operate the Service.

  • PayPal— processes all payments. We share with them only what is necessary to initiate a checkout. PayPal Privacy Policy.
  • Vercel— hosts our website and runs our serverless functions. Resume data passes through Vercel only when you generate a PDF. Vercel Privacy Policy.
  • Amazon Web Services (AWS)— receives contact form submissions through a Lambda function and delivers them to us via Amazon SES. The data shared is limited to what you submit in the contact form (name, email, category, message). AWS Privacy Notice.
  • Google Analytics 4— aggregate, anonymized traffic measurement. Sets first-party cookies (_ga, _gid) to count unique visitors and page views. We do not collect personally identifiable information through analytics. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
  • Resend— transactional email delivery provider. We use Resend to send your payment receipt to the email address you provide at checkout. Resend Privacy Policy.
  • Arcjet— bot and abuse protection on our API endpoints. Arcjet inspects request metadata (IP address, headers) to detect and block automated abuse. No resume content is shared with Arcjet. Arcjet Privacy Policy.

Cookies and Local Storage

We use the following browser storage mechanisms:

  • localStorage for storing your resume data on your own device. This data never leaves your browser unless you export a PDF.
  • Google Analytics cookies (_ga, _gid) to measure unique visitors and page views.

Data Retention

Resume data:Stored in your browser only. Cleared when you use the “Start New Resume” option or clear your browser storage. We never retain a copy.

Payment records: Transaction records (amount, date, PayPal transaction ID, payer email) are retained for up to 7 years as required by Canadian and US financial record-keeping regulations.

Contact form submissions: Retained for up to 12 months from the date of your inquiry to provide continuity if you follow up, then deleted.

Your Rights

Depending on where you live, you have specific rights regarding your personal information.

Canadian residents (PIPEDA)

  • The right to access the personal information we hold about you
  • The right to correct inaccurate or incomplete information
  • The right to withdraw consent for collection or use
  • The right to file a complaint with the Office of the Privacy Commissioner of Canada

California residents (CCPA/CPRA)

  • The right to know what personal information we collect and how we use it
  • The right to request deletion of your personal information
  • The right to correct inaccurate personal information
  • The right to opt out of the sale or sharing of your personal information (we do not sell or share personal information)
  • The right to non-discrimination for exercising these rights

EU and UK residents (GDPR)

  • The right to access (Article 15)
  • The right to rectification (Article 16)
  • The right to erasure / “right to be forgotten” (Article 17)
  • The right to restrict processing (Article 18)
  • The right to data portability (Article 20)
  • The right to object to processing (Article 21)
  • The right to lodge a complaint with your local supervisory authority

To exercise any of these rights, contact us at contact@myresumekit.com. We will respond within 30 days for PIPEDA and GDPR requests, and within 45 days for CCPA requests, as required by the applicable law.

International Data Transfers

MyResumeKit is operated from Ontario, Canada, but our service providers (Vercel, Amazon Web Services, Google, Resend, Arcjet) are based primarily in the United States. By using the Service, you understand that your information may be transferred to, stored in, and processed in the United States. We rely on the European Commission’s Standard Contractual Clauses (SCCs) for personal data transferred from the EU/UK, and on equivalent safeguards for other jurisdictions.

Children’s Privacy

MyResumeKit is not intended for use by children under the age of 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us at contact@myresumekit.com and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after a change constitutes acceptance.

Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us at contact@myresumekit.com or via our contact form.