Privacy Policy

This Privacy Notice explains how OwlResume ("OwlResume," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you use our website, applications, resume-building tools, AI features, and related services (collectively, the "Service").

For personal information covered by this Notice, OwlResume, is the controller or business unless stated otherwise.

1. Information we collect

Information you provide

• Account and profile information: name, email address, password credentials in hashed form, language, region, profile image, and identifiers received when you sign in with Google or another identity provider.
• Resume and career information: contact details, location, photograph, employment history, education, qualifications, skills, projects, awards, links, and any other information you choose to include in a resume or related document.
• AI content: prompts, instructions, uploaded content, generated output, feedback, and related context when you use AI-assisted features.
• Support and communications: messages, attachments, survey answers, and records of communications with us.
• Purchase information: product or plan, amount, currency, order and transaction identifiers, payment status, purchase date, tax country, and limited billing details provided by Paddle. Paddle processes payment credentials; we do not receive or store your full payment-card number.

Do not include Social Security numbers, passport or government identification numbers, full payment-card or bank-account details, health records, precise live location, or other sensitive information that is unnecessary for a resume. Do not submit another person's information unless you are authorized to do so. A resume can still contain personal information even after obvious identifiers have been removed.

Information collected automatically

We may collect device and usage information such as IP address, browser and device type, operating system, language, referring URL, pages or features used, timestamps, crash data, approximate location derived from IP address, cookie identifiers, and security logs.

Information from other sources

We may receive information from sign-in providers, Paddle, fraud-prevention providers, analytics providers, and other service providers, consistent with your settings and their privacy notices.

2. How and why we use information

We use personal information to:

• create and secure accounts, authenticate users, and provide requested features;
• store, edit, process, translate, format, generate, and export resumes and related materials;
• process orders, confirm entitlements, maintain transaction records, and assist with refunds and disputes;
• personalize the Service, remember settings, and provide customer support;
• monitor performance, debug errors, develop features, and understand how the Service is used;
• prevent fraud, abuse, security incidents, and violations of our Terms;
• send service messages and, where permitted, product or marketing communications;
• comply with legal, tax, accounting, and regulatory obligations; and
• establish, exercise, or defend legal claims.

Where the GDPR, UK GDPR, or similar law applies, our legal bases include:

• contract: processing necessary to provide the Service or take steps you request before entering a contract;
• legitimate interests: securing and improving the Service, preventing fraud, supporting users, and operating our business, where those interests are not overridden by your rights;
• consent: for optional cookies, certain marketing, or other processing where consent is required; and
• legal obligation: complying with applicable law, lawful requests, tax rules, and recordkeeping duties.

Uploading sensitive information is not by itself explicit consent for every use of it. Where a feature requires processing for which separate consent or another additional legal condition is required, that condition must be satisfied before processing. You may withdraw consent through the contact channel below; this does not affect lawful processing already performed and may prevent the relevant feature from working.

3. AI-assisted processing

When you use an AI feature, relevant prompts, instructions, resume text, selected fields, job descriptions, or other input needed for the request are sent to an AI service provider. Resume parsing can involve processing the text extracted from your uploaded file; it is not necessarily limited to a single field. Requests may contain personal information included in that material. Do not submit information unnecessary for the request. AI output can be inaccurate; review it before use.

We process AI inputs and outputs to deliver your requested feature, investigate technical failures, provide support, and maintain safety and security. Our AI inference uses Qwen models deployed in the United States. We do not use your resume content, prompts, or AI outputs to train AI models. The Qwen model name identifies the model family; it does not itself identify the company operating the hosting infrastructure.

AI requests may include text extracted from your uploaded resume, relevant fields, instructions, and job descriptions. AI processing is distinct from storage of your account, uploaded files, support messages, and payment records. Contact us at owlresume@163.com for information about the hosting provider, request logging, retention, access arrangements, and deletion applicable to your feature.

Use of an AI feature is not blanket permission for unrelated uses of your information or transfers prohibited by law. Material changes to AI data uses will be disclosed, with additional consent obtained where required, before those new uses apply to your information.

We do not use solely automated processing to make decisions that produce legal or similarly significant effects about your employment eligibility, credit, insurance, or other protected interests.

4. Cookies and similar technologies

We use necessary cookies and browser storage for authentication, security, user preferences, and remembering your privacy and checkout choices. Optional analytics, when configured, are loaded only after you choose to allow analytics through our cookie controls. Declining analytics does not prevent use of the Service.

You can review or change your choice using Cookie settings in the site footer. Google Analytics or Baidu Analytics may be enabled depending on the site configuration. These services may receive browser and page-usage information and set their own identifiers after you opt in. We do not send resume content to analytics as part of our analytics integration. Your browser also provides cookie controls. Paddle's checkout uses its own technologies described in Paddle's privacy notice.

5. How we disclose information

We may disclose personal information to:

• service providers and processors that provide hosting, storage, content delivery, email, customer support, monitoring, analytics, security, document processing, and AI functionality;
• Paddle, which acts as Merchant of Record and an independent controller for checkout, payment, tax, invoicing, fraud prevention, buyer support, and refund processing; Paddle's processing is described in its Privacy Notice;
• identity providers when you choose social sign-in;
• professional advisers and authorities where reasonably necessary for legal compliance, audit, insurance, or the establishment or defense of claims;
• a corporate transaction participant in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards; and
• other parties at your direction or with your consent.

We do not disclose your private resume to employers or make it public unless you direct us to share or publish it through a Service feature.

We do not provide your private resume to advertisers as part of the Service. Disclosure to hosting and AI providers for requested features is described above; applicable legal classifications depend on the actual processing and provider arrangements. Where applicable law provides opt-out rights concerning sale, sharing, or targeted advertising, contact us using the privacy contact below to exercise them. This statement does not waive those rights.

6. Processing locations and international transfers

Our Qwen AI inference is deployed in the United States. This does not mean that every account, file, log, support, or payment record is stored or accessed exclusively in the United States. OwlResume and its service providers may store or access other Service data in countries different from your country of residence. Those countries may have different data-protection laws.

Contact us at owlresume@163.com for information about the locations and safeguards applicable to your information. We remain responsible for obligations imposed on us by applicable law. Acceptance of these Terms or this Notice is not permission for a prohibited transfer, and we do not claim that a particular transfer mechanism applies without regard to the actual transfer and applicable law.

7. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Notice, including to provide the Service, honor deletion requests, maintain security and fraud records, comply with tax and accounting rules, resolve disputes, and enforce agreements.

Retention depends on the type of information, the purpose, user requests, and legal requirements. Expiry of paid membership is not an account-deletion request. Deleting a resume through the interface may remove it from your account without immediately erasing every database record, log, backup, or provider copy. Account and resume content is retained to provide the Service and address valid user requests. Retention of AI requests and outputs, technical logs, and backups depends on their purpose and the relevant system; contact us for the schedule applicable to your data. We assess deletion requests under applicable law and explain any permitted retention exceptions. Transaction and dispute records may be retained as required for tax, accounting, fraud prevention, or legal claims, even after an account-deletion request. We do not promise immediate or simultaneous erasure from all systems. AI-provider deletion arrangements are described in Section 3.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for using a strong, unique password and protecting your account credentials.

9. Your privacy rights

Depending on where you live, you may have rights to:

• access and receive a copy of personal information;
• correct inaccurate information;
• delete information;
• restrict or object to certain processing;
• receive information in a portable format;
• withdraw consent at any time;
• opt out of marketing communications;
• opt out of sale, sharing, or targeted advertising where applicable; and
• appeal our refusal of a request or complain to a data-protection authority.

To exercise a right, email owlresume@163.com. We may verify your identity and authority before completing a request and will respond within applicable legal deadlines. Where a request is denied or limited, we will explain the reason and any available appeal route. Authorized agents may submit requests where local law permits. We will not discriminate against you for exercising a privacy right.

If we send marketing emails, they will include an unsubscribe method. Transactional or service communications may continue after a marketing opt-out. Where applicable law requires recognition of a browser opt-out preference signal, that requirement remains applicable; the analytics cookie choice is not a waiver of any separate statutory right.

EEA or UK users may complain to the supervisory authority in the country where they live or work. You may contact us at owlresume@163.com for information about the data protection contact or representative applicable to your request.

10. United States state privacy disclosures

In the preceding 12 months, we may have collected the categories described in Section 1: identifiers; customer-record information; commercial information; internet or electronic activity; approximate geolocation; professional or employment information; education information; user content that may contain legally protected classifications or sensitive information; and inferences used to provide or improve features.

We collect and use these categories for the purposes in Section 2 and disclose them to the recipients in Section 5. Our sale, sharing, and targeted-advertising practices are described in Section 5. The categories of information, purposes, recipients, and retention considerations are described in Sections 1, 2, 5, and 7. Contact us to request information or exercise applicable choices concerning your data. The availability of statutory rights depends on your state and whether the relevant law applies to our business; this Notice does not assert that every state privacy law applies to us.

11. Children

The Service is intended for adults who are at least 18 and have reached the age of legal majority where they live, as stated in our Terms. It is not directed to children, and we do not knowingly collect children's personal information. If you believe a child has provided personal information, contact us so we can investigate and take appropriate steps, including deletion where required.

12. Third-party sites and services

Links to or integrations with third-party services are governed by the third party's privacy notice. We are not responsible for the privacy practices of services we do not control.

13. Changes to this Notice

We may update this Notice to reflect changes in law, technology, or our practices. We will post the revised Notice and update the date above. If a change is material, we will provide additional notice or obtain consent where required.