Privacy Policy

1. Who we are

ResuFusion is operated by SWAA (Smart Workforce Automation Agent), a product company. The service runs at https://resufusion.swaa.life. Any privacy questions or requests can be directed to hellowswaa@gmail.com.

2. What we collect

• Account data: name, email, hashed password (credentials flow) or Google OAuth identifier.
• Resume data: file uploads (stored in Cloudflare R2), extracted text, and parsed structured data.
• Job description data: the JDs you paste or import.
• Usage data: comparison counts, feature use, and attribution (UTM tags for ads).
• Technical: IP address and user agent (for rate limiting and abuse prevention) and device fingerprint (for guest comparison tracking).

3. How we use it

• Deliver the core service — resume/JD comparison, resume generation, and ATS analysis.
• Enforce plan limits.
• Improve the product in aggregate — we never sell your data.
• Send transactional emails (verification, password reset, trial ending, billing).

4. AI processing

Your resume and JD text are sent to one or more AI providers for analysis — specifically OpenAI (GPT-4o / GPT-4o-mini), Moonshot, and/or Google Gemini. These providers have contractually agreed not to use our API data for training their models.

We do not train any models on your resume data.

5. Storage & retention

• Data is hosted on servers located in India.
• Free-tier accounts: automatically deleted after 30 days of inactivity.
• Paid accounts: retained while your subscription is active and for 30 days after cancellation.
• You can delete your account anytime from Settings; data is erased within 7 days.

6. Your rights

You have the right to access, export, correct, and delete your data. You can exercise these rights directly from the Settings page or by writing to hellowswaa@gmail.com.

We comply with the Indian Digital Personal Data Protection Act (DPDP), 2023, and extend GDPR-equivalent rights to users in jurisdictions where it applies.

7. Sharing

• We never sell your data.
• We share it only with: AI providers (for processing), Razorpay and Dodo Payments (for billing), and Resend (for transactional email).
• Legal disclosure: we will disclose data only if compelled by a lawful order under Indian law.

8. Security

• HTTPS for all traffic.
• Encryption at rest for resume files.
• bcrypt for password hashing.
• Rate-limited API endpoints.
• If we discover a breach affecting your data, we will notify you within 72 hours.

9. Children

ResuFusion is not intended for users under 18. We do not knowingly collect data from minors.

10. Changes

We may update this policy from time to time. For any material changes, we will notify you by email at the address associated with your account.

11. Contact

For any privacy-related question or request, reach us at hellowswaa@gmail.com.