Privacy Policy
Last updated: 24 October 2026
Who is responsible for your data
MeritResume (“we”, “us”) is responsible for the personal data described here. For any privacy question or request, email contact@meritresume.com.
What we collect, and what happens to it
Resumes you scan
When you scan a resume without an account, its text is processed in memory to produce your score and is discarded when the request completes. It is not written to a database. If you have an account, you can choose to save a scan — saving the resume text alongside it is opt-in per scan.
Resumes you build
Resumes you create in the builder are stored in our database and kept until you delete them. That is deliberate: the builder autosaves as you type so your work survives closing the tab, and a resume you cannot come back to would not be much use.
What is stored is everything you put in it — your name, contact details, employment history, education, and anything else you type. Resumes frequently contain more sensitive information than people expect. You control what goes in.
Account data
Your email address, and your subscription status and billing period. Payment card details never reach our servers — they are handled entirely by our payment provider.
Usage data
Standard server logs including IP address, used for rate limiting and security. These are kept only for a short period by our hosting provider.
Who we share it with
We do not sell your data. These are the services that process it on our behalf:
- Supabase — database and authentication. Stores your account, resumes, and subscription record.
- Vercel — hosting and serving.
- Creem — payments. Creem is the merchant of record and handles all card data.
- Resend — sends the trial reminder and account emails.
- Google (Gemini) — powers the AI writing features, when you use them.
- Google AdSense — serves ads to free users only. Never loaded for subscribers.
AI processing
The scoring engine runs entirely on our own servers and involves no third-party AI — your resume is not sent anywhere to be scored. When you use an AI writing feature, only the text needed for that request is sent to Google’s Gemini service to generate a response, and Google’s terms apply to that processing. If you would rather your text never reaches an AI provider, simply do not use the AI buttons; everything else works without them.
Where your data is stored
The services above may store and process data in countries other than the one you live in. Each of them applies its own safeguards to data it handles for us.
How long we keep it
Resumes and saved scans are kept until you delete them or delete your account. You can delete any resume yourself at any time from your resumes page.
Deleting your account
To delete your account, email contact@meritresume.com from the address you signed up with. We will cancel any active subscription and delete your profile, resumes, cover letters and saved scans within 30 days, and confirm by email when it is done.
Records of payments may be kept after deletion where we need them for tax, accounting, fraud prevention or other legal obligations.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To use any of these rights, email contact@meritresume.com. We reply within 30 days.
Why we process your data
We use your data to provide the service you asked for (your account, your resumes, your subscription), to keep the service secure and prevent abuse, and, for advertising on the free plan, on the basis of the choices you make about cookies.
Advertising
Free users may see ads served by Google AdSense, which sets its own cookies and collects data under its own policy. Ads are never shown to subscribers, and the ad script is not loaded for them at all.
Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and, for significant changes, email account holders.
Contact
Questions or requests: contact@meritresume.com.