What happens to the information you give us.

ResumeDOG is used by recruitment agencies. People who work at an agency, such as recruiters and admins, have accounts in the agency’s workspace.

Candidates do not need an account. An agency sends a candidate a private link, and the candidate uses it to send in a CV or build one. Everything a candidate provides is kept in that agency’s workspace. People at the agency can see it, edit it and send it on, for example to an employer.

From people at an agency

• Your name and email address, and your role in the workspace.
• Your password, stored only as a one way hash (Argon2), never as readable text.
• The agency’s name, logo, brand colour and settings.
• Billing records: the plan, credits, orders and invoices. If an agency pays by card, the payment is handled by Stripe and the card number never reaches ResumeDOG.
• Usage records for each conversion, such as which AI model was used and how much it cost.

From candidates

• The CV file you upload (PDF, Word or plain text), or the details you type into the CV builder, such as your contact details, work history and education.
• The converted CV and every change made to it, by you or by the agency, including anything you paste in, such as a job description used to tailor the CV.
• Voice recordings, if you use the microphone in the CV builder. A recording is sent to OpenAI to be turned into text and is not stored by ResumeDOG.
• The email addresses you send your CV to.
• Your answer, if you tell the agency you would like a consultant to contact you.

From your browser

• One cookie, for people at an agency, that keeps you signed in. It ends when you sign out or after a period without use. Candidates get no cookie.
• Your browser remembers your choice of light or dark theme and of language, and for agency users when a low credit reminder was last dismissed. This stays in your browser and is not sent to us.
• Short lived counters tied to your network address, used to slow down abuse such as repeated failed sign ins. They expire on their own.
• No advertising or analytics cookies, and no third party tracking scripts.

The service runs on Render’s servers in Frankfurt, Germany. The database and every stored file (uploaded CVs, converted CVs and exports) are kept by Supabase in Ireland. Both are in the European Union.

To read, convert and translate a CV, its text is sent to OpenAI, which is based in the United States, and, for scanned documents, to Mistral AI, which is based in France. The list of every service that handles the data, what it does and where it is based is on the Sub-processors page.

ResumeDOG runs on these services:

OpenAI

Reads a CV’s text and arranges it into the house format. Translates between the twelve CV languages, rewrites text, suggests skills and summaries, and tailors a CV to a job description when those features are used. Turns voice recordings into text.

Mistral AI

Reads the text out of uploaded files (optical character recognition), for example when a PDF is a scan.

Supabase

Database and file storage: accounts, workspaces, CVs, uploaded files and converted files.

Render

Hosting for the website, the API and the conversion workers, including the store that holds sign in sessions and the queue of conversions.

Stripe

Card payments for agency plans.

Email delivery

Sends the emails you ask the service to send, such as a CV sent to yourself or to an employer.

On every plan, a candidate’s CV is removed automatically after delivery. A job runs every day and deletes every CV whose time is up.

• Removed after delivery means the CV is deleted shortly after a finished copy is first made for downloading or sending. That happens when someone at the agency downloads or sends it, or when the candidate reaches the last step of their link. A short grace period lets the agency still fetch the other file format. A CV that is never delivered is deleted after a short period without activity.
• A different period applies only where an agency’s contract with us sets one. It counts from the last time the CV was worked on: edited, converted or exported.

An agency can also delete a candidate at any time, from the candidate’s page in its workspace. That deletes the same things straight away, whatever the plan’s window.

Deleting a CV removes the CV and the uploaded file, every converted file and earlier version, the email addresses it was sent to and the candidate’s links. What remains is a placeholder with no name, which keeps the agency’s billing and usage records correct. If another candidate in the same agency uploaded the identical file, that file is kept until no CV uses it.

The schedule covers what ResumeDOG holds. It cannot reach copies made outside the service, such as a file someone downloaded or an email that was already sent.

Some conversion settings keep a cache of translated text, one field at a time, such as a job title or a line from a job description, so the same text is not translated twice. The cache does not record which person or CV the text came from, and the daily deletion does not clear it.

Agency accounts and their settings are kept while the account exists.

ResumeDOG uses one cookie, and only because the service cannot work without it. Nothing on the site is used for advertising or analytics, so there is nothing to consent to. If that ever changes, the site will ask first, before anything optional loads, and saying no will be as easy as saying yes.

The first row is the cookie. The others are kept in your browser’s own storage and are never sent to us. Card payments happen on Stripe’s own checkout page, which has its own cookies under Stripe’s policy.

• A candidate link is a long random code. ResumeDOG stores only a scrambled (hashed) form of it, and the link stops working after a set time.
• The site is served over HTTPS, and browsers are told to use HTTPS on every visit. The sign in cookie cannot be read by scripts running on the page.

If an agency sent you a link, ask that agency. Your CV is held in its workspace, and it decides what happens to it. The first page of your link also tells you how long that agency keeps CVs.

If you work at an agency, your workspace admin manages your account and the agency’s settings.

How the service works for agencies, including plans and credits, is on the Terms page. The date at the top of this page shows when it last changed.