ResumeSpark Stay ("we", "us", "our") is committed to protecting your personal data. This policy explains what we collect, why we collect it, and how you can control it. We follow the principles of the UK GDPR and the EU GDPR.

1. Data we collect

Account data: name, email, hashed password.
CV content: any information you add to a CV — work history, education, contact details.
Billing data: processed by our payment provider (Stripe). We never store full card numbers.
Usage data: anonymised analytics about how you use the product.

2. How we use it

To provide the CV builder and related AI features.
To send you service emails (sign-in, billing, security).
To improve product quality and detect abuse.

3. Lawful basis

We process your data under the lawful bases of contract (to deliver the service you signed up for),legitimate interest (to improve and secure the product), and consent (for marketing emails, which you can opt out of at any time).

4. Storage and security

Your data is stored on EU-based servers, encrypted at rest (AES-256) and in transit (TLS 1.3). Access is limited to authorised engineers and audited.

5. Sharing

We do not sell your data. We share only with the processors required to run the service:

Supabase (hosting and database, EU region)
Stripe (payments)
OpenAI / Google AI (AI generation — content sent for processing is never used for model training)

6. Your rights

Under UK GDPR you have the right to access, rectify, export, or delete your data. Email privacy@resumesparkstay.co.uk and we will respond within 30 days.

7. Cookies

We use only essential cookies (authentication, session). We do not use third-party advertising cookies.

8. Contact

For any privacy questions or data requests, email privacy@resumesparkstay.co.uk.

Privacy Policy