Back to ResumeMatch AI

Privacy Policy

Last updated: October 22, 2026

1. Who we are

ResumeMatch AI ("we", "us", "our") is operated by BiZsight Limited, registered at [REGISTERED ADDRESS]. This policy explains what personal data we collect, why, and how we protect it.

2. What data we collect

  • Account data: your email address and usage data (e.g., number of free tailorings used).
  • Resume content: name, contact details, work history, education, skills, and any other information contained in the resume you upload.
  • Job posting data: the job description text or URL you provide for tailoring.
  • Interview audio (only if you use the voice interview coach): when you start a voice session and tap to speak, we record short audio clips solely to transcribe your interview question into text. The microphone is never accessed until you explicitly start a recording, and we request no other device permissions.
  • Payment data: handled entirely by our payment processors (Flutterwave and Stripe). We never store your card details ourselves. For each payment attempt we keep a transaction record containing your user ID, the amount, currency (USD or NGN), payment reference, plan, payment status, date and time, and the country of your IP address (a two-letter country code, never your city or street address). Subscription records hold your email, plan, status and renewal date. We use these so we can verify your plan, handle refunds or cancellations, detect fraud and meet accounting duties.
  • Market and country preference: if you choose a target market ("Local" or "Global Remote") and a target country on your dashboard, we store that choice on your profile to tailor job suggestions. It is optional and you can change or clear it at any time.
  • Location in your resume: if your resume includes a city, region or job locations, we store it as part of your resume content. We do not collect your device location.
  • IP addresses and abuse prevention: when you visit the site we receive your IP address. We use it to limit abuse, for example daily limits on the free resume scan, limits on share-link clicks and protection of restricted pages, and we keep these IP-based counters only as long as needed to enforce the limits. When someone opens one of your referral share links, we store the visitor's IP address and yours on the share-link record so we can check that a bonus was not earned by visiting your own link.
  • Recruiter activity: when a recruiter unlocks your anonymized profile, we log who unlocked it, which profile was viewed and when. Your identity is never shown to a recruiter unless you explicitly publish your portfolio page.

3. Why we collect it (lawful basis)

  • To provide the core service (tailoring your resume and cover letter) — necessary to perform our contract with you.
  • To manage your account, subscription and free-tier usage limits.
  • With your consent, to contact you about waitlist updates or product news.

4. How we use AI

Your resume text and the job posting are sent to third-party AI services to generate tailored content, rewrite bullet points, detect skill gaps, scan resumes, optimize LinkedIn profiles and prepare interview questions. Resume text can include your name, contact details and any city, region or job locations written in it, and the AI service processes all of it to produce the result. For some features, such as custom interview questions, we remove contact details before sending. Your target market and country setting is not sent to the AI service. The resume and cover letter tailoring pipeline uses Anthropic's Claude models. Other features (for example resume scanning and parsing, interview preparation and live job matching) use other models, including Google's Gemini models, selected through our platform's AI service. We use these services as paid business/API services; under Anthropic's commercial terms, Anthropic does not use customer inputs or outputs to train its models by default. We do not ourselves use your resume data to train AI models, and we do not sell your data to third parties. AI output is a suggestion — you are responsible for reviewing it before sending it to an employer.

4A. Analytics, advertising and cookies

We use Google Analytics and Google Ads (Google tag) to understand how the site is used and to measure the effect of our advertising. When you visit, Google receives technical data such as your IP address, browser and device information and the pages you view, and Google uses it to estimate your approximate location. Google may set cookies or similar identifiers for this. When you sign up, we also send Google a sign-up event containing your user ID and sign-up method (not your email or resume). Google acts under its own privacy policy: policies.google.com/privacy. You can block or delete cookies in your browser settings, adjust your ad settings at adssettings.google.com, use Google's Analytics opt-out tool (tools.google.com/dlpage/gaoptout), or contact us to object. We do not use these tools to sell your data.

If you are in the UK or EU, our legal basis for analytics and advertising measurement is our legitimate interest in understanding and promoting the service, and you have the right to object.

5. Recruiter profile unlock rules

Your profile enters the recruiter talent directory only if you choose to publish it, and it is shown anonymized (skills and ATS score, no name or contact details). Recruiters must complete a verified payment to unlock a view, and every unlock is logged. You can unpublish your profile at any time, which removes it from the directory.

6. How long we keep your data

We retain your resumes, tailored versions, applications and account data for as long as your account is active, or until you delete them. You can delete your account and all associated data instantly from Settings in the app, or request deletion via our Delete Account page. We complete email deletion requests within 30 days.

When your account is deleted, we delete your account, resumes, tailored versions, tracked applications, interview data and profile. We keep payment transaction records for 7 years after deletion for legal and accounting reasons. These records contain your user ID, the amount, currency, payment reference, plan, payment status, date and time, and the country code of your IP address. Share-link records and IP-based abuse counters are removed or expire once they are no longer needed. Anonymized, non-personal usage statistics may also be retained after deletion. Data already received by Google Analytics and Google Ads is kept under Google's own retention settings.

7. Your rights (UK GDPR / equivalent international rights)

You have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Withdraw consent at any time
  • Complain to a supervisory authority (in the UK, the ICO — ico.org.uk)

8. Data security

We use industry-standard measures to protect your data, including encrypted storage and secure transmission (HTTPS). However, no system is 100% secure, and we cannot guarantee absolute security.

9. International users

If you are located in the US, Canada, or Australia, your data may be processed in the UK or other jurisdictions. By using this service, you consent to this transfer.

10. Children

The service is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18.

11. Contact

For any privacy questions or data requests, contact: bizsightventures@gmail.com

Postal address: BiZsight Limited, [REGISTERED ADDRESS].

Cookies and analytics

We use Google Analytics and Google Ads, which set cookies and receive your IP address, to measure site use and advertising. Accept to allow, or decline to browse without these cookies. See our Privacy Policy for details.