Privacy Policy

Last updated: 3 November 2026. Operated by Nouman Majeed, trading as TahmeerResume (“we”). This page explains, in plain language, exactly what data this service holds and what it never does.

What we store

• Account data: your email address and an encrypted password record, held by our authentication provider (Supabase Auth). We never see or store your plain password.
• Your CVs: the content you type into the builder, stored in our database under your account and protected by row-level security — your rows are readable only by you. Your profile photo is different by design: it stays on your own device, in your browser. It is never uploaded to our servers, never synced, and never sent to an AI provider; it is only passed once with an export request so your chosen template can print it, and it is not kept afterwards.
• Payment records: payments are processed by our merchant of record (Lemon Squeezy). We keep a record of what plan you bought, when, and its status — never your card number or bank details, which we never receive.
• Usage counters: anonymous daily counters (for example, how many free-tool tries an IP address hash has used). IP addresses are stored only as a salted one-way hash; raw IP addresses are not kept.

What we never do

• Your contact details are never sent to any AI provider — not your name, email, phone, address or links, in any feature, ever.
• We never sell your data, and we do not use your CV to train AI models.
• Guest work is never uploaded: if you build without an account, your CV exists only in your own browser until you create an account and accept the import offer.

AI features and your text

Our AI providers have different terms, so we route traffic by what it contains — this is enforced in code, not just promised:

• Anything about you or your CV (writing help, advice chat, the guest summary tool) goes only to Groq. Groq’s terms prohibit training on API inputs or outputs, apply its Data Processing Addendum to API traffic, and offer zero data retention, which we configure on our account. Even so, your contact details are stripped out before any request is sent.
• Product questions with no personal content (for example, a guest asking how pricing works) may be answered with help from Google Gemini’s free tier. Google’s free-tier terms allow it to use unpaid content to improve its products, and Google itself warns against submitting personal information to the unpaid services — which is exactly why nothing personal, and no CV content, is ever routed there.
• AI suggestions are checked before you see them: a suggestion that adds an employer, number or fact that is not in your text is rejected automatically. Nothing the AI writes is ever applied to your CV without your explicit accept, item by item.

Analytics

We use privacy-respecting, cookieless page analytics (Cloudflare Web Analytics) that count visits without identifying you or reading your CV content.

Your rights

• Export/keep: your CVs are yours; the builder and exports are the product itself.
• Deletion: deleting your account from the account page permanently removes your profile, CVs and chat records. Your profile photo lives only on your device — removing it there (or clearing the browser) deletes it completely. Payment audit entries are anonymised (your identity link is destroyed) so the operator can keep legally required financial records.
• Questions: contact the operator through the details on this website.