Privacy Policy — AIRes Optimizer

1) Scope

This Policy applies to personal information processed when you:

Create an account or use the Service;
Upload a resume/CV;
Provide job descriptions and role requirements;
Receive analysis, optimization, and translation outputs.

2) What we collect

2.1 Information you provide

We collect the information you submit to the Service, including:

Identity and contact information: name, email address.
Resume/CV file and content: the resume file you upload and the text we extract from that file.
Job information: job description text, role requirements, target role language, and other details you provide for optimization.
Support communications: messages you send to us (e.g., support requests).

Note: Resumes often contain additional personal information (e.g., phone number, address, work history). You decide what you upload. We recommend removing sensitive information before uploading.

2.2 Information collected automatically

When you use the Service, we may collect:

Log and device data: IP address, timestamps, browser and device information, and security logs.
Usage data: actions taken in the Service (e.g., generating a report, creating an optimized version).

2.3 Sensitive information

We do not intentionally require sensitive personal data (e.g., government IDs, health data). If your resume includes sensitive data, you choose to provide it.

3) Why we process your data (purposes)

We process personal information to:

Provide the Service: extract text from your resume/CV; analyze and evaluate your resume against a job description; generate suggestions; produce optimized resume versions tailored to a target role; and translate the resume to the role’s language when requested.
Maintain and improve the Service: operate, secure, troubleshoot, and improve performance; detect and prevent abuse or fraud.
Communicate with you: send transactional emails (e.g., account notices, “report ready” emails) and respond to support requests.
Billing and payments: process payments, handle invoices/receipts, manage subscriptions.

4) Legal bases (Brazil LGPD)

Under Brazil’s Lei Geral de Proteção de Dados (LGPD), we process personal data based on one or more legal bases depending on the context, including:

Performance of a contract (to provide the Service you request);
Legitimate interests (to secure and improve the Service and prevent fraud, balancing your rights);
Compliance with legal obligations (e.g., accounting and tax obligations related to payments);
Consent (where required or used for optional features/communications; you may withdraw consent when applicable).

5) AI processing (OpenAI) and how your content is used

To deliver resume analysis, optimization, and translation, we use OpenAI as an AI processing provider.

This means:

We send resume text extracted from your uploaded file and job description/role details to OpenAI to generate outputs for you.
We use this processing only to provide the Service (analysis, optimization, translation).
AI outputs may contain inaccuracies; you are responsible for reviewing results before use.

Important: Third-party AI providers may retain and process data for limited periods for security, compliance, or service improvement depending on provider terms and technical settings. We aim to configure and contract for data minimization and restricted secondary use where available.

6) How long we keep your data (retention)

We retain personal data as long as needed for the purposes in this Policy, including keeping your resume available as a source for ongoing optimization.

Account and contact data (name/email): retained while your account is active and as needed for legal/compliance purposes.
Resume files, extracted text, and generated outputs: retained while your account is active or until you delete them (if the Service provides deletion), and may be retained longer if required for legal obligations or dispute resolution.
Payment records: retained as required by applicable accounting/tax laws.

You may request deletion (see Section 10). Some data may remain in backups for a limited period.

7) Sharing and disclosures (vendors and processors)

We do not sell your personal data. We share data only with providers necessary to operate the Service:

OpenAI — AI processing for resume analysis/optimization/translation.
Stripe — payment processing and subscription management.
Resend — email delivery (transactional emails and service messages).
Hetzner — hosting infrastructure used to run the Service and store data.

These providers are authorized to process personal information only to provide services to us, subject to contractual and security obligations.

We may also disclose information:

For legal reasons (court orders, lawful requests, compliance obligations);
To protect rights and safety (fraud prevention, security incidents);
During a business transaction (merger, acquisition, restructuring), subject to appropriate safeguards.

8) International data transfers

Some of our providers may process data outside Brazil. When personal data is transferred internationally, we take measures intended to ensure appropriate protection consistent with LGPD requirements (such as contractual safeguards and security controls).

9) Security

We implement reasonable administrative, technical, and organizational measures to protect personal data, including access controls and encryption in transit where applicable. No system is perfectly secure, and we cannot guarantee absolute security.

10) Your rights (LGPD)

Subject to LGPD and applicable exceptions, you may request:

Confirmation of whether we process your personal data;
Access to your data;
Correction of incomplete, inaccurate, or outdated data;
Anonymization, blocking, or deletion of unnecessary or excessive data (or data processed unlawfully);
Portability (when applicable);
Information about sharing with third parties;
Information about the possibility of denying consent and the consequences (when consent applies);
Revocation of consent (when consent applies);
Deletion of data processed based on consent (when applicable).

To exercise rights, email privacy@rdo.blog.br. We may request verification of identity.

11) Emails and communications

We send transactional emails needed to operate the Service (e.g., report-ready notifications, billing notices). If we send marketing emails, you can opt out through the unsubscribe link in those emails.

12) Cookies and similar technologies

We may use cookies or similar technologies for essential functionality (sessions/authentication) and security. If we use analytics cookies, we will provide appropriate disclosures and choices where required.

GDPR disclaimer: If you are located in the EEA/UK, the GDPR may apply to our processing. We act as the data controller for the Service and rely on consent for non-essential cookies where required. You can withdraw consent or manage cookie preferences via your browser settings. Contact privacy@rdo.blog.br for GDPR-related requests.

13) Children

The Service is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us to request deletion.

14) Changes to this policy

We may update this Privacy Policy. We will post the updated version with a new “Last updated” date. If changes are material, we will provide additional notice as required.

15) Contact

AIResume LTDA
Brazil
Email: edu@rdo.blog.br
Address: 842 2nd Avenue, Suite 301. Itapema, SC 88220000, Brazil