← Back to home

Privacy policy

Last updated: October 29, 2026

Resume4u is a project I built and run myself. The site lives at resume4u.vercel.app (the "Service"). This Privacy Policy describes how I handle information when you use the Service. This page is provided for transparency; it is not legal advice. If you need advice for your situation, especially for commercial or regulated use, consult a qualified professional.

Information you provide

Resume builder. You may enter personal and professional details (for example, name, contact information, work history, education, and skills) into the builder. The app is free, but you need an account to use the builder.

Contact form. If you use the contact page, you choose to send me your name, email address, subject, and message so I can respond.

Account information

Account. To use the builder you create an account with your name and email address, and a password. Or you sign in with a Google or GitHub account, and that provider shares your name and email address with the Service. I use them to run your account and to sign you in. Your account, its sign-in sessions, and the link to any Google or GitHub account you use are stored in a Neon database.

Local storage on your device

To keep your resumes between visits, the Service stores your resumes and your library in your browser's local storage. That data stays on your device unless you clear site data or use a different browser or device. It expires 30 days after your last change and is then removed from the browser automatically. There is no export or import of this data. Your resume content is not stored on my servers. Only the account details described above are stored.

PDF export

When you download a PDF, the resume you are working on is sent to the server only for the purpose of generating the file. Your other resumes and your library are not sent. The server processes the request in memory and returns the PDF. I don't use that processing step to keep a long-term copy of your resume on my systems as part of the Service's normal operation. Only a signed-in account can download a PDF, so the server checks your session before it builds the file.

Contact submissions and abuse prevention

When you submit the contact form, I validate your input, verify requests using Google reCAPTCHA, and send the message through my email provider (Resend). To reduce spam, I may apply short-term, in-memory rate limiting based on network information such as IP address associated with the request. That rate-limit data is not intended for long-term storage.

Third-party services

Parts of the Service rely on providers that may process data under their own policies, including:

  • Neon (accounts and database): stores your account and sign-in sessions in a Postgres database and runs the sign-in service.
  • Google (reCAPTCHA): helps protect forms from abuse. Google may collect and use data as described in Google's policies.
  • Resend: delivers contact form email on my behalf.
  • Unsplash (article images): some blog articles load images from images.unsplash.com. Your browser requests those images directly, so Unsplash may receive your IP address and browser details when they load.
  • Hosting (e.g., Vercel): serves the site and API routes; standard server logs may include technical data such as IP address, user agent, and request metadata as part of normal operations.

Cookies and similar technologies

The Service may use cookies or similar technologies as needed for security features (such as reCAPTCHA), site functionality, or analytics if I add them in the future. Signing in sets a session cookie, which the builder and the PDF download need to keep you signed in. If my practices change in a material way, I will update this policy or provide additional notice as appropriate.

Retention

Resumes and your library in local storage are removed automatically 30 days after your last change to them, or sooner if you clear your browser data. Your account is kept until you ask me to delete it, and I will delete it when you ask through the contact page. Email providers and hosts may retain logs or messages for periods defined in their own services. Contact messages I receive are used to respond and operate the Service, not sold to third parties.

Security

I take reasonable measures to protect information handled by the Service. No method of transmission or storage is completely secure; I cannot guarantee absolute security.

Children's privacy

The Service is not directed at children under 13, and I don't knowingly collect personal information from children under 13. If you believe I have received such information, please contact me so I can delete it where appropriate.

Changes to this policy

I may update this Privacy Policy from time to time. The "Last updated" date at the top will change when I do. Continued use of the Service after changes means you accept the updated policy.

Contact me

Questions about this policy or your data? Reach me through the contact page.