Privacy Policy
Last updated: 2026
1. Scope
This policy describes how resumebank.biz (the "Service") collects, uses, discloses, and protects personal data belonging to candidates, employers, and visitors, and explains the privacy rights available to you under applicable law, including the EU/UK General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA").
2. Data Controller and Contact
The site operator is the data controller responsible for personal data processed through the Service. Questions, requests, or complaints about this policy can be directed to the site operator's published contact information.
3. Personal Data We Collect
- Account data: email address, password (stored as a salted hash, never in plain text), and account role.
- Candidate profile data: name, title, location, phone, email, LinkedIn URL, skills, summary, resume content, uploaded resume/files, and an optional profile picture.
- Employer profile data: company name, industry, location, phone, contact email, website, description, and an optional company logo.
- Job posting data: job details submitted by employers, including the chosen application method (a URL or contact email).
- Usage data: messages sent between candidates and employers, job votes, and search activity.
- Technical data: IP address and standard web server logs, and strictly-necessary cookies (see Section 6).
4. How We Use Your Data and Legal Basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and authenticating your account | Performance of a contract |
| Publishing your candidate or employer profile and job postings | Performance of a contract |
| Full-text search and AI-assisted candidate/job matching | Performance of a contract; legitimate interest |
| Delivering messages between candidates and employers | Performance of a contract |
| Sending password reset and account-related emails | Performance of a contract |
| Securing the Service and preventing abuse | Legitimate interest |
5. Cookies
The Service uses only strictly-necessary cookies required for it to function. It does not use advertising, analytics, or tracking cookies, and does not use cookies to build cross-site advertising profiles.
| Cookie | Purpose | Type |
|---|---|---|
resumebank_session | Keeps you signed in to your candidate/employer account | Strictly necessary |
resumebank_admin_session | Keeps site administrators signed in to the admin panel | Strictly necessary |
resumebank_csrf | Protects forms against cross-site request forgery | Strictly necessary |
Because these cookies are necessary for the Service to operate, they are set without requesting prior consent, consistent with the ePrivacy exemption for strictly-necessary cookies. You can block or delete cookies in your browser settings, but doing so will prevent you from staying signed in.
6. How We Share Your Data
Candidate profiles, resumes, and uploaded files are public by design so employers can find and contact candidates — do not upload anything you don't want publicly visible. Employer profiles and job postings are likewise public. We share data with the following categories of service providers strictly to operate the Service: our hosting provider, our transactional email provider (for password reset emails), and, for the AI-assisted matching feature, a self-hosted language model that does not send your data to a third party.
We do not sell personal data to third parties, and we do not share personal data with third parties for cross-context behavioral advertising. See Section 9 for the formal CCPA/CPRA disclosure.
7. Data Retention
We retain your account and profile data for as long as your account is active. If you'd like your account and associated data deleted, contact the site operator using the published contact information.
8. Your Rights Under GDPR
If you are located in the EU/UK, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data (most profile fields can be edited directly on your profile)
- Request erasure of your data ("right to be forgotten")
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with your local data protection supervisory authority
To exercise any of these rights, contact the site operator using the published contact information.
9. California Privacy Rights (CCPA/CPRA)
Do Not Sell or Share My Personal Information: resumebank.biz does not sell personal information for monetary or other valuable consideration, and does not share personal information with third parties for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. Because we do not engage in either practice, no opt-out action is required — but if you would still like to submit a Do Not Sell/Share request, or if you are a California resident wishing to exercise your right to know, delete, or correct your personal information, contact the site operator using the published contact information and we will honor your request. We will not discriminate against you for exercising any of these rights.
10. International Data Transfers
The Service's infrastructure may be located in a different country than you. Where personal data is transferred internationally, we rely on appropriate safeguards required by applicable law.
11. Data Security
Passwords are hashed with bcrypt and never stored in plain text. We use reasonable technical and organizational measures to protect personal data, but no method of transmission or storage is completely secure.
12. Children's Privacy
The Service is not directed at, and is not intended for use by, anyone under the age of 16.
13. Changes to This Policy
We may update this policy from time to time. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.
14. Contact
Questions about this policy, or requests to exercise your privacy rights, can be directed to the site operator's published contact information.