Privacy Policy

PMResume (“we”, “us”) runs the website pmresume.online and the PMResume Android app. Both give product managers an AI review of their resume. This policy covers both. Questions about it go to hello@pmresume.online.

• Your email address. You give it to us when you upload a resume or sign in. We use it to send your report and sign-in links. We add it to our mailing list for tips and offers only if you tick the box asking for them.
• Account details. If you create an account, we keep your login. With Google sign-in, Google shares your name, email address and profile picture with us.
• Your resume. The PDF you upload and the text we extract from it. A resume usually contains personal details such as your name, phone number, work history and education, so please only upload what you're comfortable sharing.
• Your reports. Scores, feedback and suggested rewrites, and any improved resume file we generate for you.
• Payment records. When you pay, we keep the payment ID, the amount and any promo code. Card, UPI and bank details go straight to Razorpay (website) or Google Play (Android app). We never see or store them.
• Basic technical data. Like most websites, our hosting provider records standard request logs such as IP address, browser type and pages requested. We also record anonymous usage events: a random session ID, which version of the home page you saw, which steps you reached (upload, checkout, payment), and where you came from (for example the ad, link or website that sent you, including any ad click ID in the link).

• To analyse your resume, write your report and generate an improved resume.
• To email you your report and sign-in links.
• If you opted in, to email you resume tips and offers. Every such email lets you unsubscribe.
• To keep your report history and score trend in your account.
• To take payments, apply promo codes and handle refunds.
• To prevent abuse, for example limiting how many resumes one email can submit per hour.
• To understand which version of our site works better (A/B testing).
• To learn which of our ads and links bring people who find PMResume useful.
• To show ads on our website (see Cookies below).

We don't sell your personal data, and we don't use your resume to train AI models. Our AI providers process your resume only to return results to us; under their API terms they don't use it to train their models.

We follow India's Digital Personal Data Protection Act, 2023. We use your data on these grounds:

• Your consent: when you upload a resume and continue, you agree to us processing it, including with our AI providers, to create your report. Marketing emails and advertising cookies also rely on your consent, which you give separately.
• The service you asked for: sending your report, keeping your account and history, and taking your payment.
• Legal duties: keeping payment records and responding to lawful requests.

You can withdraw consent at any time: delete your account and data, choose Turn off on the cookie notice, or unsubscribe from marketing emails. Withdrawing doesn't affect what we did before, and some things (such as creating a report) can't be done without it. Complaints go to our grievance contact on the Contact page, and you can also complain to the Data Protection Board of India.

We share data only with the service providers that run PMResume for us, and only what each one needs:

These providers may store or process data outside your country, including in the United States. We may also disclose data if the law requires it, or to protect our users or PMResume from fraud or abuse.

• Uploaded resumes, extracted text and improved resume files: up to 12 months after upload, then deleted, or sooner if you delete your account or ask us to. Improved resumes can be downloaded for 90 days after they're generated.
• Reports (scores, feedback and rewrites): until you delete your account or ask us to, so you can keep your history.
• Mailing list: until you unsubscribe, ask us to remove you or delete your account.
• AI providers: Anthropic and Groq process your resume text to return results to us. Under their API terms they may keep it briefly for safety and abuse monitoring (Anthropic: up to 30 days) and then delete it.
• Usage events: anonymous visit and funnel events are kept for up to 24 months.
• Payment records: Razorpay and Google keep their own transaction records for as long as tax and financial laws require.
• Server logs and backups: kept by our providers for a limited time and then overwritten.

• Sign-in: if you log in, your session is saved in your browser's storage so you stay signed in.
• Preferences: your light or dark theme choice.
• A/B test: an ab_variant cookie, kept for 30 days, so you keep seeing the same version of our home page.
• Advertising: our website shows ads from Google AdSense. Google and its partners use cookies to show ads based on your visits to this and other websites. You can turn off personalised ads in Google Ads Settings, and learn more in how Google uses data in ads. Choosing Turn off on our cookie notice stops AdSense loading on our website.
• Ad measurement: on the website (never in the Android app) we use the Google Ads tag and the Meta Pixel to see whether visits and purchases came from our ads. They set cookies such as _gcl_aw and _fbp. Choose Turn off on the cookie notice to stop them; we remember that choice in your browser. Meta's privacy policy explains how it uses this data.
• Where you came from: the ad or link that brought you is kept in your browser for 30 days, so a later purchase can be credited to it.

You can ask to see, correct or delete the personal data we hold about you, or to stop receiving emails from us. Depending on where you live, you may have further rights under local law, including the right to complain to a data protection authority.

Deleting your account and data

• In the app or on the website: sign in, open your Dashboard and choose Delete my account & data. Deletion happens straight away.
• By email: write to hello@pmresume.online from the email address you used with PMResume. This also works if you never created an account.

See Delete your account for exactly what is deleted and what may be kept. We reply to emailed requests within 30 days.

Data travels over encrypted HTTPS connections. Uploaded and improved resumes sit in private storage and can only be downloaded through short-lived links we create for you. No system is perfectly secure, but we limit who and what can access your data.

If a security breach affects your personal data, we'll tell you and the Data Protection Board of India without delay, explain what happened and what we're doing about it, and report it to CERT-In where the law requires.

PMResume is for adults looking for work. We don't knowingly collect data from anyone under 18. If you believe a child has given us their data, email us and we'll delete it.

If we change this policy, we'll update the date at the top of this page. For significant changes, we'll tell you by email or with a notice on the site before they take effect.

Email hello@pmresume.online with any question or request about your data.