Privacy Policy

1. Introduction

Welcome to GoresumAi ("we", "our", "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect when you use our website and AI-driven resume building platform, how we use it, and what rights you have in relation to it under the applicable laws of the Republic of India.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the platform, express an interest in obtaining information about us, or use our resume-building tools. This includes:

• Account Credentials: Full Name, Email Address, and Password (encrypted securely via hashing).
• Resume Generation Data: Educational background, professional work experience, contact details, skills, certifications, and any other data you input into our resume layouts.
• Payment Information: When upgrading to the Pro Plan, payment tokens or billing data are processed safely via authenticated, standard third-party payment gateways (Razorpay/Stripe). We do not store your raw credit card numbers or banking passwords on our servers.

3. How We Use Your Information

We process your information for purposes based on legitimate business interests, the fulfillment of our services with you, and compliance with our legal obligations. We use the data to:

• Create, maintain, and verify your account via email OTP checks.
• Generate ATS-optimized resume outputs using artificial intelligence algorithms.
• Manage user subscription plans, compute AI credit metrics, and keep service continuity intact.
• Enforce our terms, conditions, and anti-abuse policies.

4. Data Protection & Storage in India

Your data is strictly stored and processed inside secure cloud servers with multi-layer encryption. In compliance with the Indian Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, we implement strict technical measures to protect your sensitive personal data from unauthorized access, loss, or alteration.

Please note that your password hash and OTP records are completely isolated inside encrypted tables, ensuring maximum security boundaries.

5. Data Sharing & Third-Party Disclosure

We **do not sell, trade, or rent** your personal resume data or contact logs to third-party advertisers. We only share information with your explicit consent or when legally required by the Government of India or law enforcement agencies under valid statutory legal processes.

6. Your Rights under DPDP Act

As a user in India, you have specific rights regarding your personal data:

• Right to Correction: You can edit or re-generate your resume profiles and account parameters at any time via your user dashboard.
• Right to Erasure (Account Deletion): You have the right to request the total deletion of your profile rows from our active database tables by reaching out to our team.

7. Cookies and Session Tracking

We utilize secure local HTTP-Only cookies to manage active user sessions, login state contexts, and identity claims parameters. This ensures you do not have to log in repeatedly during a single session and protects your dashboard route from cross-site scripts.

8. Contact Grievance Officer

In accordance with the Information Technology Act, 2000, if you have any questions, concerns, complaints, or grievances regarding this policy, please contact our designated official at: