Privacy policy
Your resume is personal. Here is what we collect, why we use it, and how you stay in control.
On this page
Who we are
goodResume is operated by Bytzo Inc., Ontario, Canada. This policy explains how we handle personal information when you visit our website, upload a resume, create an account, or use application preparation and tracking tools. Contact our privacy team at support@goodresume.app.
Information you provide
We process account details such as your name, email, authentication credentials and linked sign-in identifiers. Career content can include contact details, work history, education, skills, projects, references, photos, uploaded documents, job descriptions, resume and cover-letter versions, interview answers, notes and application status history. We also store searches, saved jobs, prompts and edits when you use those features. Only include information you want processed. Avoid government identification numbers, financial account details, health records and other unnecessary sensitive information. Obtain permission before adding someone else’s contact details, such as a reference.
Uploading without an account
Guest uploads are sent to our server for text extraction and, when needed, OCR. This guest extraction does not call an AI language model or save the resume to an account database. Temporary upload files are removed after processing. The extracted draft is stored in this browser’s local storage. It expires after 24 hours without an update and is cleared when the editor next checks it; this is not a background deletion timer. Clear this site’s browser data to remove it immediately. Anyone with access to that browser may be able to see the draft. Signing in does not by itself save or replace your profile: you choose to save it.
Why we use information
We use information to authenticate you, maintain your workspace, extract and format resumes, prepare documents for a job description, provide match suggestions and interview preparation, track applications, deliver requested integrations, provide support, prevent abuse and resolve errors. We may send account verification, security and other service messages. Technical records may include IP addresses, browser or device information, request times, failures and security events. We do not sell your resumes or publish them to recruiters by default.
AI-assisted features
Manual guest editing and formatting do not require AI. When you use AI features, relevant resume or profile content, job descriptions, instructions, document drafts and conversation context may be sent to the AI provider configured by Bytzo Inc. A fallback provider may receive the same relevant content if the primary provider fails. Connected-inbox analysis may send relevant email text and application context to AI to classify replies or prepare suggestions. This is separate from simple document formatting. Provider processing and retention depend on the provider and service agreement; we do not promise zero retention by every provider. We do not use your private career content to train our own general-purpose AI models. Contact us for the current providers before using AI if you need that information.
Google, LinkedIn, email and calendar
Google or LinkedIn sign-in supplies basic identity information allowed by your consent, such as name, email and profile image. Signing in does not grant access to your mailbox or calendar, and LinkedIn sign-in does not import your full employment history. Gmail and Calendar connections are optional and request separate permissions. With Gmail read access, we retrieve and store application-related message details, including sender, recipients, subject, date and body, to associate replies with applications and analyse them. Gmail send access allows emails you choose to send, including selected attachments. Calendar permissions allow availability checks and management of interview or follow-up events you request. Access tokens and refresh credentials support these connections; refresh credentials are encrypted at rest. Disconnect in Google settings or revoke access in your Google Account permissions. Imported messages and application records may remain until you delete them. Removing local data does not recall sent mail or necessarily remove events or copies held by Google or recipients.
Limits on Google data use
Our use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used for the connected features you authorize, not advertising, sale to data brokers, or training general-purpose AI models. Human access to Google data is restricted to situations permitted by that policy, such as your explicit permission for support, security investigation, or legal obligations. Other workspace content may be accessible to authorized administrators when needed to operate, support or secure the service.
Sharing and processing locations
Service providers may process information needed for hosting, storage, authentication, AI, operational email and support. Job-search providers receive search queries and filters; opening or importing a posting contacts the relevant website. Employers or other recipients receive information when you choose to share or send it. Providers and recipients may operate outside Canada, and information may be subject to laws in those countries. We may disclose information where legally required, to protect users and service security, or in a business transaction with appropriate protections. We do not claim Canadian-only storage. You can request details of the current providers and processing locations.
Cookies and browser storage
We use session cookies and browser storage for sign-in, security, preferences and guest drafts. Clearing or blocking them can sign you out, remove an unsaved draft or prevent features from working. This policy does not authorize undisclosed advertising tracking. Any future optional tracking that requires consent will be presented separately.
Retention, deletion and account closure
Saved profiles, application documents and history remain until you delete them or request closure, subject to legal and security needs. Background processing records can contain input text and results; their retention follows the configured task-retention setting, which is separate from saved documents. Temporary downloads and backups have their own cleanup schedules. Settings → Data lets you export workspace data and delete workspace content, including local backups and downloads. That reset does not itself delete your sign-in account. To close your account or request deletion of remaining account information, email support@goodresume.app from the account email. We may verify your identity. We will explain any information we must retain and the applicable retention period. Copies you downloaded, recipients’ copies, and independently retained provider records are not removed by deleting a workspace. Limited operational backups or security records may persist until their retention period ends.
Your choices and rights
You can edit your profile, export your workspace, remove applications, disconnect integrations and stop using optional AI features. Contact support@goodresume.app to request access, correction, deletion, withdrawal of consent, account closure, or information about our privacy practices. Withdrawing access may prevent the related feature from working. We respond in accordance with applicable law and explain any exceptions. You may raise unresolved concerns with the applicable privacy regulator, including the Office of the Privacy Commissioner of Canada.
Security, age and changes
We use access controls and authentication to help protect personal information, but no system can guarantee absolute security. Keep credentials and downloaded exports private. goodResume is not intended for children under 16; contact us if a child has supplied personal information. We update this policy as the service changes and will provide notice and seek further consent where required for material changes in data use.
Read our Terms & conditions.