Privacy Policy

1.Who we are

resumetyper (“we”, “us”) is a browser-based resume builder operated by Bohdan Masliannykov Software, ul. Ignacego Solarza 16 lok. 4, 35-118 Rzeszów, Poland (NIP 5170426930). We are the controller of the personal data described below. Full company details are on our imprint page at https://resumetyper.app/imprint.

For any privacy question or request, contact us at [email protected].

2.Your resume data never reaches us

Everything you type into the resume editor — your name, contact details, work history, and any other content — is processed entirely in your browser and stored only in your browser's localStorage. It is never transmitted to, or stored on, our servers. We have no copy of it and no technical means to read it.

Because the data lives only on your device, clearing your browser data deletes it permanently. We recommend downloading a backup of anything important.

3.What we do collect: purchases and licensing

If you purchase a premium license, we store the minimum needed to deliver and manage it:

• the email address you used at checkout (to deliver your license key and respond to support requests),
• Stripe customer and payment identifiers (to match payments, refunds, and disputes to your license),
• a cryptographic hash of your license key — never the key itself — plus its validity dates,
• short-lived session records when you sign in with a license key, including a device identifier used to enforce the two-device limit.

4.Payments

Payments are processed by Stripe. Your card details are entered on Stripe's hosted checkout page and never touch our servers. See Stripe's privacy policy at https://stripe.com/privacy.

5.Cookies

We set exactly one cookie, and only after you sign in with a license key:

• rm_session — an opaque session token that keeps you signed in and enforces the two-device limit. HttpOnly, Secure, SameSite=Lax, and it expires after 30 days or when you sign out.

6.Why you see no cookie banner

rm_session is strictly necessary to deliver a service you explicitly requested — signing in — so under the ePrivacy Directive (art. 5(3)) and the Polish Telecommunications Law it needs disclosure, which is this section, but not consent. We set no advertising cookies, no analytics cookies, no tracking pixels and no third-party cookies, so there is nothing to ask you to consent to. If that ever changes, a consent banner will appear before any such cookie is set.

7.Emails

We send transactional emails only — license key delivery and replies to your requests — via Resend (https://resend.com/legal/privacy-policy). We do not send marketing emails without your explicit consent.

8.Who else processes your data

We use two processors, both bound by data processing agreements and both used only for the purposes below. This is our complete subprocessor list:

• Stripe Payments Europe, Ltd. (Ireland) — payment processing, fraud prevention and payment records. Privacy policy: https://stripe.com/privacy.
• Resend (Plus Five Five, Inc., United States) — delivery of transactional email: license keys and deletion confirmations. Transfers outside the EEA rely on the EU Standard Contractual Clauses. Privacy policy: https://resend.com/legal/privacy-policy.

9.Data retention

Purchase and license records are kept for as long as required for accounting, tax, and fraud-prevention purposes. Session records are deleted after they expire.

10.Your rights

Under the GDPR you have the right to access, rectify, erase, and port the personal data we hold about you, and to lodge a complaint with your supervisory authority. Since resume content never reaches us, these rights in practice concern purchase and license records.

You can exercise your right to erasure (art. 17) yourself at https://resumetyper.app/account/delete: enter your email, confirm the link we send, and we erase your license, key and sessions immediately. Note that Stripe keeps its own payment record for statutory accounting periods, which we cannot delete on their behalf.

For anything else, email [email protected] and we will respond within 30 days. The Polish supervisory authority is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

11.Changes to this policy

We will update this page if our data practices change and adjust the effective date above. Material changes will be highlighted on this page.