Privacy Policy

1. About this policy

This policy explains how Rizz My Resume Pty Ltd (we, us) handles personal information when you use Rizz My Resume (the Service). We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) and the privacy laws of the US states that apply to us. If you have a question, contact our Privacy Officer at privacy@rizz-my-resume.com.

2. What we collect

Sensitive information

We don't ask for sensitive information such as health, ethnicity, religion, sexuality, criminal record or union membership. Resumes sometimes include it (for example, membership of a professional association or union, or a disability). If you choose to include it, you consent to us processing it only to provide the Service. Leave out anything employers don't need, such as your date of birth, photo or health details.

3. How we collect it

• Directly from you, when you sign in, use the Service, buy a plan or contact us.
• From Google, if you choose Continue with Google (your name, email and profile photo).
• From Stripe, about the payments you make.
• Automatically, through the technical logs our hosting provider keeps when your browser contacts us.

4. How we use it

• To run the Service: import and review your resume, tailor it to jobs and prepare you for interviews.
• To create and secure your account and keep you signed in.
• To take payments, manage your plan, send receipts and remind you before an annual renewal.
• To answer your questions and give support.
• To prevent fraud, abuse and misuse of the AI features, and to keep the Service secure.
• To meet legal obligations, such as tax records and keeping a record of what you agreed to.
• To understand and improve the Service using technical and aggregated data. We don't read or mine your resume content for this.

We'll only send you marketing emails if you've agreed to receive them, and every one will have an unsubscribe link. Service emails (sign-in links, receipts, renewal reminders and important changes) aren't marketing and are part of providing the Service.

5. AI processing

When you use an AI feature, the content needed for that request (for example your resume text, the job posting you pasted or your practice answer) is sent from your browser through our server to our AI provider, OpenAI or Google, to generate the result. Our server passes it on and returns the answer. It doesn't keep a copy.

• We use these providers' business API services, under terms that don't allow them to use your content to train their models.
• Providers may keep requests for a limited time to detect abuse and comply with law, then delete them.
• The AI produces suggestions that you choose whether to use. We don't use computer programs to make decisions about you that significantly affect your rights or interests.

6. Who we share it with

We share personal information only as needed to run the Service, with these service providers:

We may also share information with our professional advisers, with authorities when the law requires it or to protect someone's safety, and with a buyer if our business is sold (who must protect it in the same way).

We don't sell personal information, and we don't share it for cross-context behavioural or targeted advertising.

7. Overseas processing

Our providers process information in the United States and other countries where they or their sub-processors operate, so your information will likely be disclosed outside Australia. Resumes and jobs saved to your account are stored in Cloud Firestore in the United States. Before sharing, we take reasonable steps to ensure each provider protects it in a way consistent with the Australian Privacy Principles, including through contracts and data processing terms.

8. Storage, security and retention

We protect information with encryption in transit (HTTPS), verified sign-in tokens on every AI and billing request, access controls, and by collecting as little as possible. Resumes saved to your account are protected by database rules that let only your own signed-in account read or change them. A working copy is also kept in your browser, so anyone with access to your device can see it while you're signed in. Sign out on shared computers: that removes the copy from the browser.

9. Your choices

• You can look around and use the resume editor and ATS checks without an account, and you can use a nickname in your account name. You need an email address to sign in and use the AI features.
• Delete individual resumes and jobs in the app, and the deletion carries over to your account. Signing out removes everything from that browser.
• Unsubscribe from marketing emails anytime using the link in the email.
• We treat Global Privacy Control (GPC) and similar browser signals as a request to opt out of any sale or sharing of personal information. We don't do either, but the signal is honoured if that ever changes.

10. Access, correction and deletion

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and data by emailing privacy@rizz-my-resume.com. We'll check your identity (usually by replying to your account email), respond within 30 days, and won't charge you for making a request. Deleting your account also deletes the resumes and jobs saved to it. If we can't do what you ask, for example because the law requires us to keep a record, we'll explain why.

11. US state privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Oregon, Texas, Virginia and other states with privacy laws), you may have the right to:

• know what personal information we collect, use and disclose, and get a copy in a portable format;
• correct inaccurate information and delete information;
• opt out of the sale or sharing of personal information, targeted advertising and certain profiling;
• limit the use of sensitive personal information;
• not be treated differently for exercising these rights; and
• appeal if we decline your request, by replying to our decision.

We give these rights to all users wherever they live. Email privacy@rizz-my-resume.com to use them. An authorised agent can make a request for you with your signed permission. We'll respond within 45 days.

In the last 12 months we collected these categories: identifiers (name, email, user ID, IP address); customer records and commercial information (plan and purchase history); internet activity (technical logs); professional or employment-related information (resume and job content you save to your account or send to AI features); and sensitive information only where you include it yourself. Sources, purposes and recipients are described in sections 3, 4 and 6. We disclose this information to service providers for business purposes only. We haven't sold or shared it, and we don't knowingly sell or share the information of anyone under 16.

California residents may also ask whether we share personal information with third parties for their own direct marketing. We don't.

12. Children

The Service is for people aged 16 and over. It isn't directed to children under 13, and we don't knowingly collect their personal information. If you believe a child under 13 has given us personal information, contact us and we'll delete it.

13. Data breaches

If a data breach is likely to cause serious harm, we'll notify affected people and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme, and give notice as required by US state breach notification laws.

14. Complaints

If you're unhappy with how we've handled your information, email our Privacy Officer at privacy@rizz-my-resume.com. We'll acknowledge your complaint, look into it and reply within 30 days.

If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or, in the US, to your state attorney general.

15. Changes to this policy

We'll update this policy when our practices or the law change. The date at the top shows the latest version. If a change is significant, we'll let you know and ask you to review it before you continue using the AI features. See also our Cookie Policy.

16. Contact us