Privacy Policy

• Account details, such as email address, name, authentication identifiers, and plan/usage metadata.
• Interview configuration, questions, answer transcripts, evaluations, coding submissions, execution results, and generated reports.
• Resume or job-description text you choose to paste into an interview.
• Referral-request details, including your name, email, phone number, role, job ID, target company, experience level, request status, confirmation deadline, payment identifiers, and whether an employee route was verified. If you request a refund, we also store the request time and reason.
• Payment identifiers and plan-entitlement metadata after a verified Razorpay payment. Resume60 does not receive or store full card, bank, UPI, or OTP credentials.
• Anonymous page-view and device information through Vercel Web Analytics.

Authentication is provided through Supabase Auth, including email/password and Google sign-in. Resume60 stores a profile linked to the Supabase user identifier, together with your email and available name. Authentication sessions are maintained using essential Supabase session cookies.

The ATS Resume Lab reads PDF or DOCX files in your browser. The selected file itself is not uploaded to Resume60 or stored in a Supabase Storage bucket. Extracted resume text, job-description text, ATS results, and builder drafts are saved in your browser’s local storage so you can continue editing on that device.

If you separately paste resume text or a job description into the AI interview setup, that text is stored with the interview record in Supabase and may be included in prompts sent to OpenAI for interview processing.

Submitted interview answers are stored as text in Supabase with their evaluations. Coding problems, submitted code, execution results, and AI evaluations may also be stored. Completed AI-generated reports are stored with the relevant interview and are protected by user-level access rules. Draft interview state is additionally stored in local storage on the device for refresh recovery.

Resume60 uses the browser’s SpeechRecognition capability to turn speech into text. The current application does not create, upload, or store an audio recording. The browser or its speech-recognition provider may process audio to return a transcript under that provider’s terms. Once you submit an answer, the resulting text is handled like any typed interview answer.

Vercel Web Analytics is enabled. It provides aggregated page-view information such as visited path, referrer, approximate location, device type, operating system, and browser. Vercel documents that Web Analytics uses anonymized data and does not use analytics cookies. Hosting and security infrastructure may also process ordinary request logs, including IP address and request metadata.

• Authenticate users and maintain account sessions.
• Run interview practice, preserve progress, evaluate answers, execute supported code, and generate reports.
• Analyse resumes locally, generate requested DOCX files, and enforce free or paid usage limits.
• Review referral eligibility, verify a requested job opening, assign an eligible employee route, and communicate referral status. Candidate details are shared only when needed to process the request.
• Create and verify Razorpay orders, activate purchased access, prevent misuse, secure the service, diagnose failures, and understand aggregate usage.
• Respond to privacy, billing, support, and deletion requests.

Resume60 sends relevant interview questions, submitted answer text, interview context, coding content, and report-generation inputs to OpenAI’s Responses API. OpenAI processes this information to return questions, evaluations, suggested answers, and reports. Resume60 does not currently send the ATS Resume Lab’s uploaded file to OpenAI. Avoid submitting secrets or information you do not want processed by an AI provider.

• Supabase — authentication, session management, and application database.
• OpenAI — interview question, evaluation, and report processing.
• Vercel — website hosting and anonymous Web Analytics.
• Razorpay — one-time checkout, order/payment processing, and payment verification.
• Google — optional Google OAuth sign-in.
• Judge0-compatible code execution service — submitted Java or Python code may be sent to the configured runner when live code execution is enabled; otherwise local structural demo checks are used.

Account and interview records are stored in Supabase. Browser drafts remain on the device until you clear browser storage, clear the draft in the product, or use the deletion flow where supported. Resume60 currently has no published fixed retention period for active account data; it is retained while needed to provide the account and service.

Account deletion removes the Supabase auth user and cascade-linked profile, interviews, questions, answers, coding attempts, and reports. Some infrastructure logs, payment records held by Razorpay, backups, or provider records may remain for security, legal, fraud-prevention, or operational retention periods controlled by the relevant provider.

Resume60 uses encrypted HTTPS connections, Supabase row-level security, authenticated server routes, and server-side payment-signature verification. Privileged Supabase credentials remain server-side. No method of storage or transmission is guaranteed to be completely secure, so users should avoid including unnecessary sensitive information.

Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of your personal information, and may object to certain processing. You can update some account information through the authentication provider and can delete the account through Account Settings. Requests may require identity verification.

Signed-in users can open Account → Settings and use Delete account. After explicit confirmation, the server deletes the Supabase Auth user; database foreign-key cascades remove the linked profile and interview records. The browser also clears Resume60 interview and resume drafts on that device. Payment-provider records or legally required records are not controlled by this deletion.

Essential Supabase cookies keep users signed in and refresh sessions. Resume60 does not currently use marketing cookies, and Vercel Web Analytics does not use analytics cookies. Local storage is used for interview recovery, ATS resume drafts, first-resume builder drafts, and currency preference. See the Cookie Policy for more detail.

Resume60 is a career-preparation product and is not directed to children under 13. Users who are minors in their country should use the service only with permission from a parent or legal guardian where required. If personal information from a child was provided without appropriate permission, request deletion.

This policy may change as Resume60 adds features, providers, or legal requirements. The updated date will change when material revisions are published. Continued use after a change is subject to the updated policy where permitted by law.

For privacy questions, rights requests, or deletion assistance, use the Contact page. Current contact destination: support@resume60.in.