GDPR Compliance
Your rights under the General Data Protection Regulation
Last updated: January 2025
Our Commitment to GDPR
Resume Rewriter is committed to complying with the General Data Protection Regulation (GDPR) and protecting the rights of individuals in the European Union and European Economic Area. This page outlines how we meet our GDPR obligations and your rights as a data subject.
Legal Basis for Processing
We process personal data under the following legal bases:
Contract Performance
Processing necessary to provide our resume processing services that you've requested.
Legitimate Interests
Processing for our legitimate business interests, such as improving our services and preventing fraud.
Consent
Processing based on your explicit consent for specific purposes, such as marketing communications.
Legal Obligations
Processing necessary to comply with legal requirements, such as tax and accounting obligations.
Your GDPR Rights
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of any inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restriction
Request restriction of processing of your personal data.
Right to Portability
Receive your data in a structured, commonly used format.
Right to Object
Object to processing of your personal data in certain circumstances.
Data Processing Details
Categories of Data
- Identity data (name, email from OAuth providers)
- Contact data (email address)
- Technical data (IP address, browser type, device information)
- Usage data (how you use our services)
- Content data (resumes and documents you upload)
Retention Periods
- Resume data: Automatically deleted after 24 hours
- Account data: Retained while account is active
- Transaction data: 7 years for legal compliance
- Technical logs: 30 days for security purposes
International Transfers
We may transfer your data outside the EEA for processing. When we do, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for countries with equivalent data protection
- Your explicit consent for specific transfers
Data Protection Contact
For any questions or concerns about our GDPR compliance or to exercise your rights, please contact:
Data Protection Officer
Email: dpo@resumerewriter.com
Address: Resume Rewriter
123 Tech Street, Suite 100
San Francisco, CA 94105
United States
You also have the right to lodge a complaint with your local supervisory authority if you believe we have not adequately addressed your concerns.