This Privacy Policy describes how NiceResume (“we,” “us,” or “our”), operated by Leonel Flores Ruiz (based in Guadalajara, Jalisco, Mexico), collects, uses and shares your personal information when you use the NiceResume website at niceresu.me and its web application (the “Service”).
We are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union, the California Consumer Privacy Act (CCPA) for California residents, and Mexico’s Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP).
The short version: we collect only what we need to run the Service, we never sell your data, and your resumes are yours.
1. Information We Collect
1.1 Account Information
- Email address: entered when you buy, and used to create your account.
- Name and profile picture: provided by Google when you sign in with Google.
1.2 Your Resumes
We store the resumes you create so you can come back to them from anywhere. This includes everything you type into them (which usually contains personal details such as your phone number, location, work history and education) and your section and formatting choices.
We use this content only to provide the Service to you: saving your resumes, showing the preview, calculating your ATS score and generating your PDF. The ATS check runs in your browser and do not use artificial intelligence or send your resume to any third party. We do not read, sell or share your resumes, and we do not use them for advertising or to train any model.
If your resume includes information about other people (for example, references), please make sure you have their permission to include it.
1.3 Payment Information
Payments are handled entirely by Stripe. We do not collect, store or process your card number or banking details. Stripe sends us confirmation that the payment went through, plus basic transaction details (amount, currency, payment status and Stripe reference IDs), which we keep as a record of your purchase.
1.4 Technical Information
When you use the Service, our infrastructure processes some technical data automatically:
- Server logs: IP address, browser type, operating system, requested pages and timestamps, used for security, debugging and keeping the Service running.
- Abuse prevention: your IP address (at checkout) or account ID (in the app) is used to limit how many requests can be made in a short period, and Cloudflare Turnstile checks that checkout requests come from a real person.
We do not currently use analytics or advertising trackers. If we add a privacy-focused analytics tool in the future, we will update this policy and our Cookie Policy first.
2. How We Use Your Information
We use your data only for the following purposes:
- Providing the Service: creating your account, signing you in, checking that you have access, and saving and displaying your resumes. (Legal basis under GDPR: performance of our contract with you.)
- Payments and refunds: confirming your purchase and processing refund requests. (Contract and legal obligations.)
- Support and communication: answering your messages and sending essential notices about your account or changes to our terms. We do not send marketing emails. (Contract and legitimate interests.)
- Security and fraud prevention: protecting the Service and its users from abuse. (Legitimate interests.)
- Legal compliance: keeping the records that tax and accounting laws require. (Legal obligations.)
3. Who We Share Data With
We do not sell or rent your personal data. We share it only with the service providers we need to run NiceResume:
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Google (OAuth) | Sign-in | Name, email address, profile picture | USA |
| Stripe | Payment processing | Email address, payment and transaction data | USA |
| Railway | Hosting and database | Account data, resume content, server logs, IP addresses | USA |
| Cloudflare Turnstile | Bot protection at checkout | IP address, browser and device signals | Global |
| Upstash | Rate limiting (abuse prevention) | IP address or account ID, kept for about a minute | USA |
These providers process data on our behalf and are bound by confidentiality and data protection obligations. We may also disclose information if required by law or to protect our rights or the safety of others.
4. International Data Transfers
Your data may be transferred to and processed in countries other than your own, including the United States and Mexico, where data protection laws may differ. When we transfer data, we rely on our providers’ safeguards, such as the European Commission’s Standard Contractual Clauses, to keep it protected.
5. Data Retention and Account Deletion
- While your account is active: we keep your account information and resumes so you can use them. Resumes you delete in the app are removed from our database right away.
- If you get a refund: your access ends, but your resumes are not deleted automatically. You can ask us to delete them, along with your account, at any time.
- If you ask us to delete your account: email [email protected] from your account’s email address. Within 30 days, we will permanently delete your account information and all of your resumes. This cannot be undone, so download any resume you want to keep first.
- Purchase records: we keep basic payment records (amount, date and Stripe references) for as long as tax and accounting laws require, even after your account is deleted.
- Server logs: kept for a limited time by our hosting provider and then deleted.
6. Your Rights
Depending on where you live (for example, under the GDPR, the CCPA or your ARCO rights under Mexican law), you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: correct inaccurate data. You can edit your resumes yourself at any time.
- Deletion: ask us to delete your account and associated data.
- Objection and restriction: ask us to stop or limit certain processing.
- Portability: receive your data in a structured, machine-readable format.
- Non-discrimination: (CCPA) we will not treat you differently for exercising your rights.
- Complaint: lodge a complaint with your local data protection authority.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
7. Security
We use reasonable technical and organizational measures to protect your data, including encrypted (HTTPS) connections, sign-in through Google, access controls so that each user can only reach their own resumes, and rate limiting. However, no method of transmission or storage over the internet is 100% secure.
8. Children’s Privacy
NiceResume is not intended for children under 16 (or under 13 in the United States). We do not knowingly collect personal data from children. If you believe a child has given us personal information, contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a new “Last updated” date. If a change materially affects how we use your data, we will notify you by email.
10. Contact
For questions or requests about this Privacy Policy or your data, contact:
- Owner and data controller: Leonel Flores Ruiz
- Location: Guadalajara, Jalisco, Mexico
- Website: niceresu.me
- Email: [email protected]