Privacy Policy

Last updated: 27 September 2026 (version 2026-09-27). This policy is written to describe what ResumeCaliper actually does. It applies to the ResumeCaliper website and product app, wherever you are located. Where this policy is translated, the English version prevails in case of doubt, except where the law of your country requires otherwise.

In short

• You upload your own CV and a job description; ResumeCaliper uses an AI model to estimate the match, suggest improvements and draft a tailored CV and cover letter.
• Default (hybrid): identifiers are replaced in your browser; you review the cleaned text; ResumeCaliper receives anonymised text only (no original CV file and no CV restore map on the servers). Contact details are restored in your browser when you build the PDF. The product is hosted on Contabo in the EU (optional Contabo object storage for run files). Anonymised CV inputs are deleted when the run finishes. Downloadable PDF files are one-shot (deleted right after download). Scores, the job description and the rewrite source stay in History for up to 48 hours — including after that download. Nothing from a run is kept past 48 hours.
• ResumeCaliper does not sell personal data, does not show your CV to employers or advertisers, and does not use it to train AI models.
• You can export or delete your account yourself, at any time, from the app.

1. Who is responsible (controller)

The data controller is Arseniy Rusentsov, a self-employed professional (autónomo) established in Spain, trading as ResumeCaliper.

• Registered address: Placa Catalana 1, 1-4, 08032 Barcelona, Spain
• Tax ID (NIF): Z0402379E
• Privacy contact: [email protected] (or the Contact page)

The controller has not appointed a Data Protection Officer: the operator is a single-person business and the processing does not fall under the cases in GDPR Art. 37 or Art. 34 of the Spanish LOPDGDD. Because the controller is established in the EU, no representative under GDPR Art. 27 is required. Full operator identification (Spanish LSSI-CE) is on the Legal notice.

2. Data the Service must not receive

Please do not upload:

• Special categories of data (GDPR Art. 9): health or disability information, religious or philosophical beliefs, trade-union membership, political opinions, racial or ethnic origin, sex life or sexual orientation, genetic data, or biometric data used to identify you. ResumeCaliper does not need this information and has no lawful basis to process it. There is no exception for information you think a job requires.
• Identity documents (passport, ID card, driving licence, residence permit, social-security cards) or scans and photos of them.
• Other people's CVs or personal data. The service is for your own application only.

Before each analysis you confirm that the file contains none of the above. ResumeCaliper also runs automated wording checks that stop the analysis when text looks like a special-category disclosure. Those checks are a safety net, not a guarantee: they can miss content and can produce false alarms. If an analysis is stopped, remove the flagged text and upload the file again.

Upload a digital CV with selectable text (PDF or Word exported from an editor, or TXT). Photos or scans of paper CVs are not supported in the default hybrid flow — the browser cannot reliably extract selectable text from them.

3. What personal data is processed and where it comes from

Category	Examples	Source
Account data	Firebase user ID, e-mail address, display name, profile picture URL (when provided), account creation and update dates	You, when you register with email and password, or your Google account when you sign in with Google
Agreement and consent records	Version of the Terms and Privacy Policy you accepted and when; your cookie choices and their date	You
Application materials	Job title, job description text, anonymised CV text (hybrid: browser extract + anonymise); optional notes for regeneration; optional portrait photo (stays on your device until you build the PDF); chosen CV template	You
Derived data	Fit score, category scores, must-have/nice-to-have coverage, improvement suggestions, improved CV (structured text / client-built PDF), cover letter, language detected	Generated by ResumeCaliper and by the AI provider from your materials
Credits and billing data	Credit balance, package purchased, price, currency, Stripe payment and session identifiers, ledger of credits used	You and Stripe. ResumeCaliper never receives or stores full card numbers.
Technical and security data	IP address (kept in hashed form in rate-limit keys; in plain form only in short-lived edge and application logs), browser and device type, session identifiers, request and error logs, abuse-prevention tokens	Your browser and the Service infrastructure
Approximate region	Country-level region (Europe / US-Canada-Australia / elsewhere price group) from Cloudflare’s CF-IPCountry edge header on your request to the Service	Cloudflare (already processing the connection); ResumeCaliper does not send your IP to a separate geolocation service
Support correspondence	E-mails you send to the operator and the operator's replies	You

ResumeCaliper does not collect data from data brokers or other third-party sources, and does not track you across other websites.

4. Purposes, legal bases and how long data is kept

Purpose	Data used	Legal basis (GDPR Art. 6(1))	Retention
Creating and securing your account; signing you in	Account data, session identifiers	(b) contract	Until you delete your account
Running the analysis you request: extracting text, anonymising identifiers, scoring, generating the improved CV and cover letter, letting you download the results	Application materials, derived data	(b) contract	Anonymised CV inputs deleted when the run finishes; scores, job description and rewrite source up to 48 hours (including after one-shot download); each downloadable PDF file is one-shot
Including a portrait photo in the generated PDF	Photo	(a) consent — you choose to add it; withdraw by not uploading one or by deleting the run	With the run outputs (48 hours)
Removing identifiers before AI processing and encrypting files	Application materials	(f) legitimate interest in data minimisation and security (this also protects you)	As above
Preventing abuse, enforcing free-tier limits, protecting the service and other users, detecting bots	Technical and security data, abuse-prevention tokens	(f) legitimate interest in the security and integrity of the service	Security logs up to 15 days; rate-limit and abuse keys expire automatically (minutes to days)
Showing the price list for your region and currency	Approximate region from Cloudflare country header	(f) legitimate interest in showing correct, region-specific prices; only a country-level result is used and no profile is built	Not stored on ResumeCaliper servers beyond the session
Selling and delivering credit packages, invoicing, tax and accounting records	Credits and billing data, e-mail address	(b) contract and (c) legal obligation (Spanish tax and commercial law)	Ledger and invoicing records for the period required by law (in general 4 years for tax and up to 6 years for commercial records), even after account deletion, with profile data removed
Keeping evidence of the agreements you accepted and of your cookie choices	Agreement and consent records	(c) legal obligation (GDPR Art. 7(1), Art. 5(2)) and (f) legitimate interest in defending claims	Until you delete your account; the ledger keeps only technical identifiers afterwards
Optional analytics on the marketing site (only if configured and accepted)	Pseudonymous usage events	(a) consent (ePrivacy / LSSI Art. 22.2)	Per the vendor's settings; withdraw via Cookie settings
Optional display advertising (only if configured and accepted)	Advertising identifiers set by the ad network	(a) consent	Per the vendor's settings; withdraw via Cookie settings
Answering your requests, handling complaints and rights requests, complying with law and defending legal claims	Support correspondence, account data	(c) legal obligation and (f) legitimate interest	For the duration of the matter and any statutory limitation period

Is providing data mandatory? Account data and your application materials are necessary to provide the service: without them ResumeCaliper cannot run an analysis. Providing a photo, notes, or optional cookies is voluntary. Nothing in this policy is based on GDPR Art. 9(2): ResumeCaliper does not process special categories of data intentionally.

5. How the AI analysis works

This section gives the meaningful information about the logic involved that GDPR Art. 13(2)(f) and the EU AI Act (Art. 50) require. A longer explanation is on the AI transparency page.

1. Upload. CV text is extracted and identifiers are replaced in your browser; you review the cleaned text before it is sent; ResumeCaliper receives anonymised text only (no original CV file and no CV restore map on the servers). The Service does not offer a server-side raw-CV upload path.
2. Text extraction. Extraction runs in your browser (PDF, Word/DOCX, or TXT with selectable text). Photos and scans of paper CVs without selectable text are not supported.
3. Special-category check. Automated wording checks look for likely special-category disclosures and, if found, stop the run, release the credit and delete the inputs.
4. Identifier anonymisation. In the browser, pattern and heuristic tools replace detected personal names, phone numbers, e-mail addresses, personal profile URLs (for example LinkedIn) and common ID patterns with placeholders before upload. You can mark extra phrases. On the server, ResumeCaliper runs Art. 9 wording checks and a light one-way contact/ID re-scrub on the anonymised text (no restore map is stored). Employers, job titles, dates, locations, skills and free text stay, because they are what the analysis needs. Contact details in the job description are removed one-way. The map needed to restore your details stays in your browser and is used only when you build the downloadable PDF locally.
5. AI processing. The anonymised CV text, the job description and, where applicable, your notes are sent to OpenAI's API (GPT-4o-class models). The model is instructed to (a) derive the requirements and scoring criteria from the job description, (b) rate the CV against those criteria per category — skills, experience, education, domain knowledge and language — and for must-have and nice-to-have items, producing scores on a 0–100 scale together with written explanations and suggestions, and (c) on request, rewrite the CV and draft a cover letter using only facts present in your source CV, without inventing employers, degrees, skills or achievements. ResumeCaliper sends each request with store=false, and OpenAI's API terms exclude API data from model training.
6. Rendering. Your browser fetches the anonymised improved CV (and, where available, the cover letter), restores contacts from the local map, and builds the PDF on your device.
   • Cover letter PDFs — Art. 50(2) machine-readable marker. An AI-drafted cover letter is new synthetic text composed for the application. ResumeCaliper therefore embeds a machine-readable marker in the PDF document information dictionary (Subject, Keywords, Creator/Author) identifying it as AI-generated, so that tools and recipients can recognise it as such (EU AI Act Art. 50(2)).
   • Improved CV PDFs — no Art. 50(2) PDF metadata marker. The improved CV is an AI-assisted rewrite of your own source CV: the model is instructed to reorganise and rephrase content using only facts already present in your materials, and not to invent employers, degrees, skills or achievements. ResumeCaliper treats that as assistive editing of your existing document rather than generating a new text from scratch, so it does not apply the Art. 50(2) PDF metadata marker to CV downloads. The CV remains an AI Output: you are told in this policy, the AI transparency notice and the in-app AI notice that it was produced with AI, and you must review it before use. This product design choice is not a legal certification that Art. 50(2) never applies; counsel may refine it if the law or the feature changes.
7. Deletion. Anonymised CV text and prompts held for the run are deleted when the run finishes. Browser restore maps are cleared after download, logout, or a short session TTL. The job description and rewrite source stay for up to 48 hours so you can regenerate from History — including after one-shot download. Downloadable PDF files (improved CV / cover letter) are removed after a successful one-shot download, or within 48 hours if unused. Scores and suggestions stay available in History for the same 48-hour window. Nothing from a run is kept past 48 hours.

What the AI is and is not. Scores are estimates produced by a large language model from the text it can read. They are not calibrated to any employer's applicant-tracking system, they can be wrong, incomplete or biased, and the same CV can receive somewhat different scores on different runs. Always review the generated text before you use it: you are responsible for the accuracy of what you send to an employer.

6. Automated decision-making and profiling

The service evaluates your CV automatically, but the result is shown only to you, as decision support for your own job search. ResumeCaliper does not take decisions about you that produce legal effects or similarly significantly affect you (GDPR Art. 22), does not pass scores to employers or recruiters, and does not rank you against other people. ResumeCaliper is not a recruitment, screening or applicant-ranking tool and must not be used as one.

7. Who receives your data (processors and other recipients)

ResumeCaliper uses the following service providers, who process data on the controller's instructions under GDPR Art. 28 data processing agreements, unless stated otherwise:

Recipient	What for	Data	Location / transfer safeguard
OpenAI (OpenAI, L.L.C., United States)	AI scoring and text generation	Anonymised CV text, job description, notes; generated text	United States. OpenAI's Data Processing Addendum with EU Standard Contractual Clauses. API data is not used for training; it may be retained by OpenAI for up to 30 days for abuse monitoring and then deleted.
Google – Firebase Authentication (Google Ireland Ltd / Google LLC)	Account creation and sign-in with email and password, or with a Google account	E-mail, password (stored and hashed by Firebase for email/password accounts — ResumeCaliper never sees the plaintext password), name and profile picture when provided (including from Google), user ID, sign-in tokens	EU and United States. Google Cloud Data Processing Terms; Google LLC is certified under the EU–US Data Privacy Framework and EU Standard Contractual Clauses apply.
Contabo GmbH (Germany)	Hosting of the application, database, queue, workers and private object storage for run files	All data held by the service, encrypted at rest for run files	European Union.
Cloudflare, Inc.	DNS, content delivery, DDoS/WAF protection, approximate country for the price list (CF-IPCountry), and, when enabled, the Turnstile bot check	IP address, request metadata, security tokens, country code derived at the edge	Global edge network; EU processing where available. Cloudflare's DPA; certified under the EU–US Data Privacy Framework.
Stripe (Stripe Payments Europe Ltd, Ireland; Stripe, Inc.)	Payment processing, receipts, fraud prevention	Payment details (entered directly on Stripe), e-mail, amount, currency, package	EU and United States. Stripe's DPA; certified under the EU–US Data Privacy Framework. For fraud prevention and its own legal duties Stripe acts as an independent controller — see Stripe's privacy policy.
Google AdSense (Google Ireland Ltd) — optional, only after you accept ads	Display advertising	Advertising cookies and identifiers	Google's advertising terms; EU–US Data Privacy Framework. CV content is never shared with advertisers.
Google Analytics / Tag Manager, Microsoft Clarity — optional, only on the marketing site, only if configured and accepted	Usage statistics	Pseudonymous usage events	Vendor terms; EU–US Data Privacy Framework.
Google Workspace / Gmail	Receiving and answering e-mails sent to the privacy contact	Your e-mail and its content	Google's terms; EU–US Data Privacy Framework.

Other recipients: public authorities, courts or professional advisers where the law requires or allows it (for example a tax inspection or a legal claim). ResumeCaliper does not sell personal data, and does not share your CV or job descriptions with employers, recruiters, data brokers or other users.

8. International transfers

ResumeCaliper servers are in the European Union. Some providers listed above process data in the United States. For those transfers the controller relies on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the provider is certified, and otherwise on the Standard Contractual Clauses (Commission Decision 2021/914) together with supplementary measures — encryption in transit, encryption at rest for run files, identifier anonymisation before AI processing, and short retention. You can ask the controller for a copy of the relevant safeguards at [email protected].

9. Retention summary

Data	Kept for
Anonymised CV text and prompts (server); CV restore map (browser only)	Server copies deleted when the run finishes; browser restore map cleared on download / logout / short TTL
Job description and rewrite source (for History regenerate)	Up to 48 hours. One-shot download does not shorten this.
Results: scores and suggestions	Up to 48 hours (including after one-shot download of the PDF files)
Improved CV PDF, cover letter PDF, optional photo	One-shot: deleted immediately after a successful download, or within 48 hours if unused. One-shot download does not remove scores, the job description, or the rewrite source.
Account profile and agreement records	Until you delete your account
Credit ledger and billing records	Statutory tax and accounting periods (generally 4 to 6 years), linked to a technical identifier only after account deletion
Security and operations logs (application, host and edge logs, job records)	Up to 15 days
Rate-limit and abuse-prevention keys	Expire automatically within minutes to days
Database backups	Encrypted backups are kept for a limited period and overwritten on rotation; deleted runs cannot be restored from them because deletion receipts block their re-use

10. Security

Measures applied (GDPR Art. 32) include: TLS for all traffic; AES-256-GCM encryption at rest for run artifacts held on Contabo (VPS and, when configured, Contabo object storage), with keys held only on ResumeCaliper servers; hybrid default so original CV files and contact restore maps are not stored on the servers; identifier anonymisation in the browser before upload plus light server re-scrub; owner-only access to runs and downloads; CSRF protection and secure, HttpOnly session cookies; hashed IP addresses in rate-limit storage; identifier-only logs (no CV text); file-type verification and size limits on uploads; prompt-injection filtering of uploaded text; least-privilege access to storage; Cloudflare DDoS/WAF protection; and a 15-day maximum for security logs. The hybrid path is designed so contact restore stays client-side; it is not a guarantee against all identifier leakage in free text.

If a personal data breach is likely to result in a risk to you, the controller will notify the AEPD within 72 hours and inform you without undue delay where the risk is high (GDPR Arts. 33–34).

11. Your rights

You have the right to:

• Access your data and receive a copy (Art. 15).
• Rectify inaccurate or incomplete data (Art. 16).
• Erase your data (Art. 17).
• Restrict processing in the situations set out in Art. 18.
• Portability: receive the data you provided in a structured, machine-readable format (Art. 20).
• Withdraw consent at any time where processing is based on consent (photo, optional cookies), without affecting processing already carried out.
• Not be subject to solely automated decisions with legal or similarly significant effects (Art. 22) — ResumeCaliper does not take such decisions.

Right to object (Art. 21). Where the controller relies on legitimate interests (security and abuse prevention, anonymisation, price-region lookup, defence of claims), you may object at any time on grounds relating to your particular situation. The controller will then stop the processing unless it can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. ResumeCaliper does not use your data for direct marketing.

How to exercise them. Signed-in users can export (JSON) or delete their account under Privacy & data in the app; deletion purges run files, clears your profile, releases credits and revokes your sign-in. For anything else, or if you cannot sign in, e-mail [email protected]. The controller may ask you to confirm your identity (for example by writing from the e-mail address linked to the account). The controller responds within one month; this may be extended by two further months for complex requests, in which case you will be told. Requests are free unless they are manifestly unfounded or excessive.

Complaints. You can lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), or with the data protection authority of the EU/EEA country where you live or work. If you are in the United Kingdom you may also contact the ICO. The controller would appreciate the chance to resolve your concern first at [email protected].

12. Cookies and similar technologies

ResumeCaliper uses strictly necessary cookies and browser storage (session, CSRF protection, theme, language and your cookie choices), an optional analytics category and an optional advertising category. On the marketing site, when Google Analytics or Tag Manager is configured, ResumeCaliper uses Google Consent Mode v2 so that analytics and advertising storage signals default to denied until you accept those categories in the cookie notice. Details, names, lifetimes and how to change your choices are in the Cookies policy.

13. Children

ResumeCaliper is not directed at children. You must be at least 18 years old (or the age of majority where you live) to use it, as set out in the Terms. If the controller learns that it holds data of a person under that age, that data is deleted.

14. Changes to this policy

ResumeCaliper updates this policy when practices change and updates the version date at the top. For material changes a notice is shown on the site and in the app and, where required, your renewed acknowledgment is asked for before you continue.

15. Contact

Privacy questions, requests and complaints: [email protected] — or the Contact page. See also the Terms, the Cookies policy, the AI transparency notice, the Legal notice, the Data Processing Addendum and the Subprocessors list.