Privacy Policy

1. Introduction

At Resuvix AI ("we", "our", "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered career tools at resuvix.com.

By using Resuvix AI, you consent to the practices described in this policy.

2. Information We Collect

2.1 Personal Information (Provided by You)

Data Type	Examples	Purpose
Account Details	Full name, email address, phone number	Account creation, OTP verification, login
Resume Content	Work experience, education, skills, projects	Resume building, ATS scanning, interview prep
Uploaded Documents	PDF/DOCX resumes, job descriptions	ATS analysis, cover letter generation
Interview Responses	Text/voice answers to mock interview questions	AI evaluation and performance scoring

2.2 Payment Information

We use Razorpay as our payment gateway. We do NOT store your credit card number, CVV, or full banking details on our servers. Razorpay handles all payment data under PCI-DSS compliance. We only store:

• Razorpay Payment ID and Order ID (for transaction records)
• Plan type purchased (Pro Pass / Single Pass)
• Transaction timestamp and amount

2.3 Automatically Collected Information

• Usage Analytics: Pages visited, features used, session duration
• Device Information: Browser type, operating system, screen resolution
• IP Address: For security monitoring and abuse prevention

3. How We Use Your Information

We use your data exclusively for the following purposes:

• Service Delivery: To generate resumes, analyze ATS compatibility, create cover letters, and conduct mock interviews.
• AI Processing: Your resume text and interview responses are sent to Google Gemini AI for analysis. This data is processed in real-time and is not stored by the AI model after processing.
• Account Management: To authenticate your identity, manage your subscription, and track your entitlement usage (free vs. paid features).
• Communication: To send OTP codes, transaction confirmations, and important service announcements.
• Platform Improvement: Aggregated, anonymized usage data helps us improve our AI models and user experience.

4. Data Storage & Security

• Database: Your data is stored on MongoDB Atlas cloud infrastructure with encryption at rest and in transit (TLS 1.2+).
• Passwords: All passwords are securely hashed using bcrypt with salt rounds. We never store plain-text passwords.
• Authentication: We use JWT (JSON Web Tokens) with HTTP-only secure cookies for session management.
• File Uploads: Uploaded PDFs/DOCXs are processed in memory and are not permanently stored on our servers after processing.
• Access Control: Server-side access is restricted to authorized personnel only with role-based permissions.

5. Cookies & Local Storage

Resuvix AI uses the following browser storage mechanisms:

• HTTP-Only Cookies: For secure authentication tokens (JWT). These cannot be accessed by JavaScript.
• Local Storage: For caching user preferences (theme settings, last used template) and session state.
• Session Storage: For temporary data transfers between pages (e.g., ATS-to-Interview transfer data).

We do not use third-party tracking cookies or advertising pixels.

6. Third-Party Services

We integrate with the following third-party services to power our platform:

Service	Purpose	Data Shared
Google Gemini AI	Resume analysis, question generation, answer evaluation	Resume text, interview Q&A (processed in real-time, not retained)
Razorpay	Payment processing	Payment details (handled entirely by Razorpay under PCI-DSS)
MongoDB Atlas	Cloud database hosting	All user data (encrypted at rest and in transit)
Nodemailer (SMTP)	OTP delivery and transactional emails	Email address, OTP code

7. Data Retention

• Active Accounts: Your data is retained for as long as your account is active.
• Deleted Accounts: Upon account deletion request, all personal data is permanently removed within 30 days.
• Payment Records: Transaction records may be retained for up to 7 years as required by tax and financial regulations.
• Interview Sessions: Mock interview history is retained until you manually delete it or request account deletion.

8. Your Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Correct any inaccurate or incomplete personal data.
• Right to Deletion: Request permanent deletion of your account and all associated data.
• Right to Data Portability: Request your resume and profile data in a standard machine-readable format.
• Right to Withdraw Consent: You may withdraw consent for data processing at any time by deleting your account.

To exercise any of these rights, contact us at akashsingg23@gmail.com.

9. Children's Privacy

Resuvix AI is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete the data.

10. International Data Transfers

Your data may be processed and stored in data centers located outside your country of residence (including cloud infrastructure in the United States, Europe, and Asia). We ensure that all transfers comply with applicable data protection laws and that appropriate safeguards are in place.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of Resuvix AI after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or requests regarding your privacy or this policy, please reach out to us: