PRIVACY POLICY

Effective as of February 6, 2026

INTRODUCTION

This Privacy Policy informs users of the website resumory.com (hereinafter "the Website" or "the Platform") about how their personal data is collected and processed.

This policy is established in accordance with Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data (GDPR) and French Law No. 78-17 of January 6, 1978, as amended, on data processing, files, and freedoms.

By using the Website, the User acknowledges having read this Policy and consents to the processing of their personal data as described herein.

ARTICLE 1 – IDENTITY OF THE DATA CONTROLLER

The data controller is:

• Name: Gautier Colasse
• Status: Sole proprietor
• Contact: Contact form
• Website: resumory.com

ARTICLE 2 – DATA COLLECTED

2.1 Data Provided Directly by the User

When registering and using the Services, we collect the following data:

Identification Data

• First and last name
• Email address
• Password (stored in encrypted form)
• Profile photo (optional)

Professional Data (for resume creation)

• Identity information: full name, professional title
• Contact details: email, phone, address, website/portfolio
• Professional experience: positions held, companies, descriptions, dates
• Education: institutions, degrees, dates
• Skills and languages spoken
• Driver's license
• Professional photo (optional)

Cover Letter Data

• Desired job title
• Letter type and professional situation
• Additional information provided by the User

Contact Data

• Name, email, subject, and message (contact form)

2.2 Automatically Collected Data

When browsing the Website, we automatically collect:

• Browsing data: pages visited, session duration
• Technical data: browser type, operating system
• IP address (anonymized for statistics)

2.3 Payment Data

Payment data (credit card number, etc.) is collected and processed directly by our payment provider Lemon Squeezy. We do not store this data on our servers. We only retain the identifiers needed to manage billing and subscriptions.

ARTICLE 3 – PURPOSES OF PROCESSING

Your personal data is processed for the following purposes:

3.1 Contract Performance

• Creating and managing your user account
• Providing resume and cover letter creation Services
• Generating personalized content through artificial intelligence
• Managing subscriptions and billing
• Customer support and responding to requests

3.2 Legitimate Interests

• Improving and optimizing the Services
• Statistical analysis of Website usage
• Fraud prevention and Website security
• Sending information related to the Services (updates, maintenance)

3.3 Consent

• Sending marketing communications (with your prior agreement)
• Use of non-essential cookies
• AI-generated professional photos

3.4 Refunds and Disputes

We may process account identifiers, transaction references, and support exchanges to handle refund requests or payment disputes. Payment data remains processed by Lemon Squeezy; we do not store full card details.

ARTICLE 4 – LEGAL BASIS FOR PROCESSING

Personal data processing is based on:

• Contract performance: for providing the Services
• Consent: for marketing communications and certain cookies
• Legitimate interest: for improving the Services and security
• Legal obligation: for retaining billing data

ARTICLE 5 – DATA RECIPIENTS

Your data may be shared with the following categories of recipients:

5.1 Technical Subcontractors

5.2 Analytics Services

5.3 Other Recipients

Your data may also be disclosed to competent authorities upon request and in the context of legal obligations.

ARTICLE 6 – DATA TRANSFERS OUTSIDE THE EU

Some of our subcontractors are located outside the European Union, particularly in the United States. In such cases, data transfers are governed by:

• Standard contractual clauses approved by the European Commission
• Compliance with the EU-US Data Privacy Framework where applicable
• Specific contractual guarantees ensuring an adequate level of protection

You may obtain a copy of the appropriate safeguards by contacting us via the contact form.

ARTICLE 7 – DATA RETENTION PERIODS

Personal data is retained for the following periods:

At the end of these periods, data is deleted or irreversibly anonymized.

ARTICLE 8 – YOUR RIGHTS

In accordance with the GDPR, you have the following rights regarding your personal data:

8.1 Right of Access

You may obtain confirmation that data concerning you is being processed and receive a copy of it.

8.2 Right to Rectification

You may request the correction of inaccurate or incomplete data.

8.3 Right to Erasure

You may request the deletion of your data under the conditions provided by the GDPR.

8.4 Right to Restriction

You may request the restriction of processing of your data in certain cases.

8.5 Right to Data Portability

You may retrieve your data in a structured and commonly used format.

8.6 Right to Object

You may object to the processing of your data for reasons relating to your particular situation.

8.7 Right to Withdraw Consent

When processing is based on your consent, you may withdraw it at any time.

8.8 Post-Mortem Directives

You may define directives regarding the handling of your data after your death.

To exercise these rights, contact us via the contact form.

You also have the right to file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

ARTICLE 9 – COOKIES

9.1 What is a Cookie?

A cookie is a small text file placed on your device when visiting a website. It allows information about your browsing to be stored.

9.2 Cookies Used

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the Website to function and cannot be disabled. They enable authentication and security.

Analytics Cookies

We use Plausible Analytics, a privacy-friendly solution that does not require consent as it does not use personal cookies and does not perform cross-site tracking.

Performance Cookies

Hotjar allows us to analyze Website usage to improve it. These cookies are subject to your consent.

9.3 Cookie Management

On your first visit, a banner allows you to set your preferences. You can change these choices at any time from the Website settings or your browser settings.

ARTICLE 10 – SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, modification, disclosure, or destruction:

• Data encryption in transit (HTTPS/TLS)
• Password encryption
• Secure hosting on servers located in the European Union
• Restricted data access on a need-to-know basis
• Regular security system updates
• Periodic security audits

ARTICLE 11 – USE OF ARTIFICIAL INTELLIGENCE

Our Service uses artificial intelligence technologies to:

• Generate text suggestions for your resumes and cover letters
• Analyze and extract information from documents
• Create stylized professional photos

Regarding these processes:

• Data sent to AI services is used solely to provide the requested functionality
• We use OpenAI and Replicate APIs with strict privacy settings
• No automated decision with legal effects is made without human intervention
• You retain full control over generated content and its use

ARTICLE 12 – MINORS

The Website is not intended for persons under 16 years of age. If you are a minor, you must obtain the consent of your legal guardians before providing personal data.

If we learn that data concerning a minor under 16 has been collected without parental consent, we will delete it promptly.

ARTICLE 13 – POLICY AMENDMENTS

We reserve the right to modify this Privacy Policy at any time. In the event of a substantial change, we will inform you by email or by notification on the Website.

The date of the last update is indicated at the top of this document.

ARTICLE 14 – CONTACT

For any questions regarding this Privacy Policy or to exercise your rights, you may contact us:

• Via the contact form

We commit to responding to your request within one month. This period may be extended by two months in the case of complex requests.

Resumory – resumory.com Last updated February 6, 2026