Privacy Policy

This Privacy Policy explains how BuildRez, operated by Syed Mohammad Mustafa Shah, collects, uses, and protects your information when you use the Service. By using BuildRez, you agree to this Policy.

1. Information We Collect

• Account information: your email address and chosen username.
• Content you provide: resumes you upload and job descriptions you paste or import, along with the materials generated for you.
• Usage information: records of actions such as uploads, optimizations, and exports, used for product functionality, billing accuracy, and abuse prevention.
• Billing information: handled by Stripe. We do not store your full card details; we store limited subscription and billing-status data.
• Technical information: limited data such as IP address and user agent, used for security, rate limiting, and legal evidence of consent.

2. How We Use Information

• To provide, operate, and improve the Service;
• To process your subscription and maintain billing records;
• To secure the Service and prevent abuse and fraud;
• To maintain records of agreement to our Terms and this Policy;
• To communicate with you about your account and the Service.

3. AI Processing

To generate your materials, the relevant content (such as your resume text and the target job description) is sent to our AI provider, OpenAI, for processing. We send only what is needed to produce your requested output. We do not sell your personal information.

4. Storage and Security

Account data, content, and files are stored using Supabase (authentication, database, and file storage). Data is protected in transit and at rest, and access is restricted so that you can only access your own records. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

5. How We Share Information

We share information only with service providers that help us run the Service — currently Stripe (payments), Supabase (infrastructure), and OpenAI (AI processing) — and only as needed to provide the Service. We may also disclose information where required by law or to protect our rights and users. We do not sell your personal information.

6. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Certain billing and consent records are retained as part of our financial and legal records.

We practice data minimization for resumes: we keep only your current working resume. When you upload a new resume, your previous resume and its generated optimization are deleted.

7. Your Choices and Rights

You may access and update your account information, and you may request deletion of your account by contacting us. Depending on your location, you may have additional rights regarding your personal information. Some records (such as billing and consent history) may be retained as required by law even after account deletion.

8. Data Protection & Compliance

We process personal information only for the purposes described in this Policy (purpose limitation) and limit collection to what is needed to provide the Service (data minimization).

Security measures

We protect data using encryption in transit and at rest, access controls that restrict each user to their own records, least-privilege handling of administrative credentials, and secure secret management. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.

Your data rights

Subject to applicable law, you may request to access, correct, delete, or receive a copy of your personal information, and you may object to or restrict certain processing. To exercise these rights, contact us at the email below. We will not discriminate against you for exercising them.

California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under California law.

Sub-processors and international transfers

We rely on the sub-processors named in Section 5 (Stripe, Supabase, and OpenAI). The Service is operated from and intended for users in the United States; data is processed in the United States.

Data breach

If we become aware of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

9. Cookies and Sessions

We use cookies that are necessary to keep you signed in and to operate the Service securely. We do not use them to sell your data.

10. Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the version and “last updated” date above. Continued use after an update constitutes acceptance.

12. Contact

Questions about your privacy? Contact us at support@buildrez.com.