Privacy Policy

Last updated: June 5, 2026

1. Information We Collect

We collect information that you provide directly to us when you create an account, use the Service, or communicate with us. This includes your full name, email address, and password (stored as an encrypted hash). For premium users, we may also collect billing information such as payment method details and transaction references, though we do not store complete payment card numbers on our servers.

When you create resumes, cover letters, and public profiles on the Service, we collect the content you provide, including your employment history, educational background, skills, professional summary, and any other information you choose to include in your documents. We also collect profile photographs if you choose to upload them.

We automatically collect certain information when you use the Service, including your IP address, browser type and version, operating system, device type, pages visited, time spent on pages, referring URLs, and other analytical data. This information is collected through cookies and similar tracking technologies as described in the Cookies section below.

If you contact us via email, support form, or any other communication channel, we collect the content of your communication along with your contact information. We may also collect information from third-party authentication providers (such as Google) if you choose to sign in using those services.

2. How We Use Information

We use the information we collect to provide, maintain, and improve the ResumeForge Service. This includes processing your account registration, authenticating your identity, providing resume building and editing features, generating AI-powered content suggestions, calculating ATS compatibility scores, and enabling export functionality.

We use your personal information to communicate with you about your account, including account verification emails, password reset requests, subscription confirmations, billing receipts, and important service announcements. We may also send you promotional emails about new features, tips, and offers if you have opted in to receive such communications.

We use automatically collected information to analyze usage patterns, diagnose technical issues, improve the user experience, and prevent fraud and abuse. This information helps us understand how users interact with the Service so we can make data-driven improvements to our platform.

We may use aggregated, non-personally identifiable information for research, marketing, and analytical purposes. This includes statistics about user demographics, feature usage, and platform performance. We will never sell your personally identifiable information to third parties for marketing purposes.

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances: (a) with your explicit consent; (b) with service providers who perform services on our behalf, such as hosting providers, email services, and payment processors; (c) to comply with legal obligations, court orders, or government requests; (d) to protect our rights, property, or safety, or that of our users or the public.

If you create a public profile, your profile information and resume content will be visible to anyone with the profile URL. Public profiles are indexed by search engines unless you opt out. You control the visibility of your profile and can make it private at any time through your account settings.

We may share aggregated, anonymized data with third parties for analytical, research, or marketing purposes. This data does not contain any personally identifiable information and cannot be traced back to individual users. Examples include statistics about the number of resumes created, most-used templates, and average ATS scores.

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your personal information becomes subject to a different privacy policy.

4. Data Storage & Security

Your data is stored on secure servers located in Pakistan and may be transferred to and processed in data centers that comply with international security standards. We employ industry-standard security measures including encryption in transit (TLS/SSL), encryption at rest, regular security audits, and access controls to protect your information from unauthorized access, disclosure, alteration, or destruction.

Passwords are encrypted using bcrypt with a cost factor of 12, which is a widely recognized secure hashing algorithm. We never store plaintext passwords and our system is designed so that even in the event of a data breach, passwords cannot be easily recovered. Authentication tokens are generated using industry-standard JWT (JSON Web Tokens) with expiration times.

We implement rate limiting on sensitive endpoints (login, registration, password reset) to prevent brute-force attacks. File uploads are validated for type and size before being stored. User-uploaded images are processed and compressed to reduce storage requirements and potential security risks.

Despite our best efforts, no method of electronic transmission or storage is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee its absolute security. You acknowledge and accept this inherent risk when using the Service. In the event of a data breach, we will notify affected users within 72 hours as required by applicable law.

5. Cookies

ResumeForge uses cookies and similar tracking technologies to enhance your experience on the Service. Cookies are small data files stored on your device that help us remember your preferences, maintain your session, and collect usage analytics. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until they expire or you delete them).

We use the following types of cookies: (a) Essential cookies, which are required for the Service to function properly, including authentication, CSRF protection, and session management; (b) Preference cookies, which remember your settings such as theme preference (light/dark mode) and language; (c) Analytics cookies, which help us understand how users interact with the Service.

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling essential cookies may prevent you from using certain features of the Service. Please note that removing or blocking cookies may impact your user experience and some features may not function as intended.

We do not use cookies for third-party advertising or cross-site tracking. We do not participate in any advertising networks that track users across websites. Our analytics cookies are used solely for improving the ResumeForge Service and are not shared with external advertising platforms.

6. User Rights

You have the right to access the personal information we hold about you. You can view and manage most of your information directly through your account settings. For information that is not accessible through the settings page, you may request a copy by contacting us at [email protected]. We will provide your data within 30 days of receiving your request.

You have the right to request correction of any inaccurate or incomplete personal information. You can update most of your information directly through your account settings. If you are unable to make a correction yourself, please contact us and we will assist you in updating your records.

You have the right to request deletion of your personal information. You can delete your account through your account settings, which will remove all your personal information, resumes, cover letters, and related data from our active systems. Please note that certain information may be retained as required by law or for legitimate business purposes, including fraud prevention and dispute resolution.

You have the right to object to the processing of your personal information in certain circumstances, including direct marketing communications. You can opt out of promotional emails by clicking the unsubscribe link in any marketing email or by adjusting your notification preferences in your account settings. Note that you will still receive essential service-related communications even if you opt out of marketing emails.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will remove your personal information from our active servers within 30 days, except where we are legally required to retain such information for longer periods.

Certain categories of data may be retained for extended periods: (a) billing and payment records are retained for up to 5 years for tax and accounting purposes as required by Pakistani law; (b) fraud detection and security logs are retained for up to 2 years; (c) aggregated analytics data that does not contain personally identifiable information may be retained indefinitely.

If your account is inactive for a continuous period of 24 months (no login activity), we may send you a notice via email asking if you wish to keep your account. If we do not receive a response within 30 days, we may delete your account and all associated data, except for data we are legally required to retain.

When you cancel a premium subscription, your account reverts to the free plan. Your resumes and data remain accessible according to the free plan limits. If the number of resumes exceeds the free plan limit, the oldest resumes will become read-only but will not be deleted unless you explicitly delete them or delete your account.

8. Third-Party Services

Our Service integrates with or uses certain third-party services to provide functionality. These include: (a) Google OAuth for authentication, which is governed by Google's Privacy Policy; (b) cloud hosting providers for data storage and server infrastructure; (c) email delivery services for sending transactional and marketing emails; (d) AI service providers for powering our content suggestion features.

We carefully select third-party service providers that maintain appropriate security standards and privacy practices. All third-party providers are bound by contractual obligations to protect your personal information and use it only for the purposes for which it was shared. We do not grant third-party service providers access to your information beyond what is necessary to perform their designated services.

The Service may contain links to third-party websites or services that are not operated or controlled by ResumeForge. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to the ResumeForge Service.

We may use open-source software libraries in the Service. These libraries are used in accordance with their respective license terms and do not have access to your personal information. A list of open-source components used in the Service can be provided upon request.

9. Children's Privacy

The Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and you become aware that your child has provided us with personal information without your consent, please contact us immediately at [email protected].

If we discover that we have inadvertently collected personal information from a child under the age of 18, we will take immediate steps to delete that information from our servers. If we are unable to verify the age of a user, we may suspend the account pending age verification.

We may collect age information during the registration process to ensure compliance with this policy. Providing false information about your age may result in immediate account termination. We reserve the right to request proof of age at any time.

10. International Transfers

Your information is primarily stored and processed on servers located in Pakistan. However, some of our service providers may be located in other countries, which may involve the transfer of your information outside of Pakistan. When your information is transferred internationally, we take appropriate measures to ensure that your data receives an adequate level of protection.

We use standard contractual clauses, encryption, and other technical and organizational measures to protect your information during international transfers. We only transfer information to countries that have been deemed to provide an adequate level of data protection or where appropriate safeguards are in place.

If you are accessing the Service from outside Pakistan, please be aware that your information may be transferred to, stored, and processed in Pakistan and other countries. By using the Service and providing your information, you consent to such transfers. Your use of the Service is at your own initiative and you are responsible for compliance with local laws.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on our website and, where appropriate, sending you an email notification at the address associated with your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. The most current version will always be available at /privacy. The date of the most recent revision will be indicated at the top of the page.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any changes, you must stop using the Service and request deletion of your account by contacting us at [email protected].

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

ResumeForge Pvt. Ltd.
Email: [email protected]
Website: https://cv.hardhour.com/contact
Location: Lahore, Punjab, Pakistan

We will acknowledge your inquiry within 48 hours and provide a substantive response within 30 days. For urgent privacy concerns or data breach notifications, we will respond as quickly as possible. If you are not satisfied with our response, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.

To exercise any of your data rights (access, correction, deletion, or objection), please email [email protected] with your account email address and a clear description of your request. We may need to verify your identity before processing your request.