1. Introduction
This Privacy Policy explains how Demands Hub AI Solutions, L.L.C. ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use The Resume application (theresume.dev) (the "Service").
We respect your privacy and are committed to protecting the personal data you share with us. This policy applies exclusively to data collected and processed via The Resume platform.
2. Information We Collect
To provide resume tailoring and parsing services, we collect the following categories of information:
- Account Information: If you sign in using Google or Microsoft OAuth, we retrieve your profile information (specifically your name, email address, and account identifier) to authenticate your session.
- Uploaded Resumes and Text: We ingest and process the document files (PDF, DOCX, TXT) and raw text you upload to parse and analyze your career history.
- Job Descriptions: We collect and store job description texts that you input for the purpose of resume tailoring and alignment.
- Generated Resumes: We store the structured history of your generated, tailored resumes in our secure Cloudflare D1 SQL database so you can access them from the dashboard.
- Technical Usage Data: Session cookies, browser metadata, and device IP addresses are utilized solely to keep you logged in and validate API routing requests.
3. How We Use Your Information
We utilize your data strictly to execute the services requested by you:
- To securely verify your identity and authenticate your user session.
- To parse entities and text out of your uploaded resume files using machine learning.
- To generate tailored variants of your resume aligned with job descriptions.
- To display your private history of resume drafts and optimized revisions.
- To operate and maintain the application infrastructure.
4. Third-Party AI Subprocessors
⚠️ Important AI Subprocessor & Data Privacy Notice:
To parse resume files and generate tailored resume text, we securely transmit your career details and job descriptions to our trusted artificial intelligence subprocessor: Google Gemini API.
Please note that transmission of data to the Google Gemini API is governed by their standard terms of service. By submitting your information, you consent to the processing of your data by Google Gemini APIs as required to perform the resume tailoring service.
5. Data Storage and Security
Your database records (user profiles, resume history, and generated versions) are hosted securely on Cloudflare D1 and Cloudflare KV storage. We implement industry-recognized security safeguards (including SSL/TLS encryption for all data-in-transit, secure HTTP-only cookies, and encrypted databases) to protect your information.
Custom API Key Security (BYOK): If you choose to configure your own API credentials (for Google Gemini, OpenAI, Anthropic Claude, or DeepSeek), we implement a robust security protocol to protect your keys:
- 256-bit AES-GCM key encryption and decryption: Stored keys are encrypted at rest on the server before being saved to our D1 database using industry-standard 256-bit AES-GCM authenticated encryption.
- Strict In-Memory Decryption: Keys are decrypted strictly in-memory during resume generation requests and are purged immediately after the API call completes. They are never written to disk, local storage, persistent caches, or server application logs.
- Masked Key Exposure: Keys are never sent back to your browser in plain text. The profile API and settings dashboard only display a masked placeholder (e.g.,
••••••••a1b2) protecting against client-side memory inspection or cross-site scripting (XSS) leaks. - Secure Transit Encryption: All key submissions and operations are routed over HTTPS with modern SSL/TLS transit encryption to prevent interception.
However, please be aware that no transmission method over the internet or database hosting platform is completely secure. We cannot guarantee absolute security. To the maximum extent permitted by law, Demands Hub AI Solutions, L.L.C. assumes no liability for unauthorized access or security breaches resulting from third-party actions or cyberattacks.
6. Data Sharing and B2B Organization Sharing
We do not sell, rent, or trade your personal data. We do not share your resumes or profile data with third-party advertisers or affiliates. Data is shared only with trusted infrastructure providers (Cloudflare hosting and Google Gemini API subprocessors) solely to the extent required to execute and host The Resume application.
B2B Organization Sharing (Opt-In): If you are a member of a B2B Enterprise tenant organization (for example, as a candidate, student, or employee invited to join a designated workspace), you have full control over whether your resumes are visible to the administrators of that organization:
- Opt-In Default: Sharing is disabled (opted-out) by default. Your master uploaded resumes and tailored variants are private to your personal dashboard and are hidden from your organization's administrators.
- Granular Control: You can choose to opt-in at any time by toggling the "Share my resumes with B2B organization admins" setting in your account configuration. Enabling this toggle grants permission to your B2B organization's administrators and designated reviewers to view your career profiles, master uploads, and tailored generations to facilitate submission reviews and placement assessments.
- Revoking Access: You can toggle sharing off at any time, which immediately hides your resume data from the organization's administration dashboards.
7. Your Choices and Rights
You can manage and delete your profile or historical generations from the dashboard. If you wish to delete your entire authenticated profile and associated resume data permanently from our databases, you can contact us at support@demandshub.com, and we will purge your records within 30 days.
8. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
Demands Hub AI Solutions, L.L.C.
Email: support@demandshub.com
Website: theresume.dev