ResuFit

Privacy Policy

Last updated: April 2026

1. Who we are

ResuFit (“we”, “us”, “our”) is a software service that helps job seekers optimise their resumes for applicant tracking systems. Our website is resufit.co. You can contact us at hello@resufit.co.

2. Data we collect

  • Account data: your email address and password (hashed) when you create an account.
  • Resume content: the text extracted from your uploaded resume and the job description you paste. This is used solely to generate your optimised resume and is not retained after your session unless you save a result.
  • Payment data: processed by Stripe. We never see or store your card details.
  • Usage data: number of optimisations used, timestamps, and the plan you are on.
  • Technical data: IP address, browser type, and approximate country (used for currency detection and rate limiting).

3. How we use your data

  • To provide and improve the ResuFit service.
  • To process payments and enforce plan limits.
  • To send transactional emails (e.g. receipts, password resets).
  • To comply with legal obligations.
We do not sell your data to third parties or use it for advertising.

4. Legal basis (GDPR)

We process your data under the following legal bases:
  • Contract performance — to deliver the service you purchase.
  • Legitimate interests — security, fraud prevention, and service improvement.
  • Legal obligation — tax and financial record-keeping.

5. Third-party processors

  • Supabase — database and authentication (EU data residency available).
  • Stripe — payment processing.
  • Anthropic — AI model provider. Resume text is sent to Anthropic's API to generate optimisations. Anthropic does not use your data to train models by default.
  • Resend — transactional email delivery.
  • Vercel — hosting and edge functions.

6. Data retention

Account data is retained until you delete your account. Optimisation records are retained for 12 months to support your dashboard history. You may request earlier deletion at any time.

7. Your rights

Under UK GDPR and EU GDPR you have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email hello@resufit.co. We will respond within 30 days.

8. Cookies

We use only essential cookies. See our Cookie Policy for details.

9. Changes to this policy

We may update this policy from time to time. Significant changes will be notified by email or a notice on the site.