Privacy Policy - Rizsume

1. Introduction

Welcome to Rizsume. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume builder service. This policy complies with the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (PDPA).

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

Name, email address, and contact information
Resume content including work history, education, and skills
Payment information (processed securely through our payment provider)
Account credentials and preferences

2.2 Automatically Collected Information

Device information and IP address
Browser type and operating system
Usage data and analytics
Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

To provide and maintain our resume building services
To process your payments and manage your subscription
To improve our AI algorithms and service quality
To send you important updates and communications
To respond to your requests and provide customer support
To detect and prevent fraud or abuse

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

Contract: To fulfill our service agreement with you
Consent: When you've given explicit permission
Legitimate Interest: To improve our services and prevent fraud
Legal Obligation: To comply with applicable laws

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service Providers: Cloud hosting, payment processing, and analytics
AI Partners: To power resume generation features (data is anonymized)
Legal Requirements: When required by law or to protect our rights
Business Transfers: In case of merger, acquisition, or asset sale

6. Your Rights (GDPR & PDPA)

You have the following rights regarding your personal data:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in a structured format
Restriction: Limit how we process your data
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@rizsume.com. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

Encryption of data in transit and at rest
Regular security assessments and audits
Access controls and authentication measures
Secure data centers with physical security

8. Data Retention

We retain your personal data only as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete or anonymize your data within 90 days, except where we're required to retain it by law.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission for GDPR compliance.

10. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can control cookie preferences through your browser settings. Essential cookies are necessary for the service to function properly.

11. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete it promptly.

12. Changes to This Policy

We may update this privacy policy periodically. We will notify you of significant changes via email or through our service. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions about this privacy policy or to exercise your rights, contact us at:

Email: rizwanulrudra@gmail.com

14. Supervisory Authority

If you're located in the EU/EEA, you have the right to lodge a complaint with your local data protection authority if you believe we've violated your privacy rights under GDPR.