Privacy Policy

Last updated: March 2025

1. Data we collect

• Account data: email address, provided when you sign in via magic link or Google OAuth (stored by Supabase).
• Resume content: text extracted from your uploaded PDF, used solely to generate the formatted resume. Not stored permanently — only the structured JSON and the generated PDF key are retained.
• Usage data: records of which template was used and when a PDF was generated, linked to your account.
• Payment data: handled entirely by Polar.sh. We do not store card numbers or payment details.

2. How we use your data

• To authenticate you and maintain your session.
• To generate and store your formatted resume PDFs.
• To display your generation history in your dashboard.
• To process payments via Polar.sh.

We do not sell your data to third parties. We do not use your resume content for AI training.

3. Third-party services

• Supabase — authentication and database (EU region available). Privacy policy.
• Cloudflare R2 — PDF storage. Privacy policy.
• Google Gemini API — resume parsing. Your resume text is sent to Google's API for processing. Privacy policy.
• Polar.sh — payment processing and VAT collection. Privacy policy.

4. Data retention and deletion

You can delete individual generation records from your dashboard at any time. To delete your account and all associated data, contact us at support@zumeo.app. We will process the request within 30 days.

5. Cookies

We use a single session cookie set by Supabase for authentication. No advertising or tracking cookies are used.

6. Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, rectify, or erase your personal data, as well as the right to data portability. Contact us at support@zumeo.app to exercise these rights.

7. Contact

Data controller: Zumeo — support@zumeo.app