Last updated: September 11, 2026
The data controller for this Service is:
| Purpose | Legal Basis |
|---|---|
| Provide and maintain Service | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract performance / Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Product improvement and analytics | Legitimate interest |
| Legal compliance | Legal obligation |
We may aggregate or de-identify data for statistical analysis. Such data cannot be linked to specific individuals.
| Type | Purpose | Can Be Disabled |
|---|---|---|
| Strictly Necessary | Maintain login, core functionality | No |
| Functional | Language preferences, personalized settings | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
You can adjust cookie preferences through your browser settings or our Cookie Management Center.
We do not sell your personal information, including as defined under applicable laws (such as CCPA). We only share information in the following circumstances:
In case of a security incident affecting your rights, we will notify you within 72 hours of discovery in accordance with applicable law.
| Data Type | Retention Period | Upon Expiry |
|---|---|---|
| Account Information | During active period; 90 days after cancellation | Deletion or anonymization |
| Transaction Records | As required by law (typically 5-7 years) | Deletion or archival |
| Support Records | 2 years | Secure deletion |
| Security Audit Logs | 6 months | Secure deletion |
To exercise the following rights, contact us. We will process requests within 30 calendar days:
| Right | Description |
|---|---|
| Right to Know | Understand what data we collect and how we use it |
| Right to Access | Obtain a copy of your personal data |
| Right to Correction | Correct inaccurate or incomplete information |
| Right to Deletion | Request deletion under specific conditions |
| Right to Restrict Processing | Pause data processing under specific circumstances |
| Right to Data Portability | Obtain your data in machine-readable format |
| Right to Object | Object to processing based on legitimate interest or marketing |
| Right to Withdraw Consent | Withdraw consent for processing based on consent |
If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.
With your consent, we may send marketing information about our Service. You can unsubscribe at any time by clicking the "unsubscribe" link in emails, disabling marketing notifications in account settings, or contacting us. Opting out does not affect service-related notifications (billing, security, policy updates).
Our servers and partners may be located in various regions including Singapore and the United States. For cross-border transfers, we ensure data security through:
This Service is intended for users who are at least 18 years old. We do not knowingly collect information from minors. If you believe your child has provided us with information, please contact us immediately at privacy@resumeup.ai and we will promptly delete such data.
This Service may contain links to third-party websites or integrate with third-party services. This Policy applies only to information we directly collect. We are not responsible for third-party data practices. We recommend reviewing their policies before using their services.
We may update this Policy at any time. Material changes will be communicated at least 15 days in advance via email or in-service notification. The "Last Updated" date at the top of this page will be revised. Continued use after changes take effect constitutes acceptance.