Personal Information You Provide

We collect information you voluntarily provide when you:

• Account Registration

  Name, email address, and password when you create an account

• Resume Content

  Professional experience, education, skills, contact information, and other details you include in your resume

• Job Descriptions

  Job postings and descriptions you upload for resume tailoring

• Payment Information

  Billing details processed securely through our payment provider (Stripe)

Information Collected Automatically

When you access the Platform, we automatically collect:

• Device Information

  IP address, browser type, operating system, and device identifiers

• Usage Data

  Pages visited, features used, time spent on the Platform, and interaction patterns

• Cookies and Tracking Technologies

  Session cookies for authentication and analytics cookies to improve our services

Information from Third Parties

If you choose to sign in using Google or LinkedIn, we receive your name, email address, and profile picture from these providers. We do not receive or store your social media passwords.

We use your information for the following purposes:

• Service Delivery

  To create your account, generate LR-AI tailored resumes, produce cover letters, and provide our core services

• LR-AI Processing

  Your resume and job description content is processed by LR-AI to generate tailored documents. This data is not used to train AI models.

• Account Management

  To manage your subscription, process payments, and communicate account-related updates

• Service Improvement

  To analyze usage patterns, improve features, and develop new services

• Security

  To protect against fraud, unauthorized access, and maintain Platform integrity

• Legal Compliance

  To comply with applicable laws, regulations, and legal processes

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers

  With trusted third parties who assist in operating our Platform (payment processing, hosting, AI services)

• Legal Requirements

  When required by law, court order, or governmental authority

• Business Transfers

  In connection with a merger, acquisition, or sale of assets, with notice to affected users

• With Your Consent

  When you explicitly authorize us to share your information

4. Third-Party Services

We use the following third-party services to operate our Platform:

• OpenAI

  For LR-AI powered resume tailoring and cover letter generation. Your content is processed but not used for model training.

• Stripe

  For secure payment processing. We do not store your full credit card information.

• MongoDB Atlas

  For secure data storage with encryption at rest and in transit.

• Google & LinkedIn (OAuth)

  For optional single sign-on authentication.

Each third-party service operates under its own privacy policy. We encourage you to review their policies to understand how they handle your data.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing (bcrypt)
• Rate limiting to prevent abuse
• Regular security audits and monitoring
• Access controls and authentication requirements

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you promptly of any breach.

Depending on your location, you may have the following rights:

All Users

• Access

  Request a copy of your personal data

• Correction

  Update or correct inaccurate information

• Deletion

  Request deletion of your account and associated data

• Export

  Download your data in a portable format

European Union Residents (GDPR)

If you are in the EU/EEA, you also have the right to:

• Object to processing based on legitimate interests
• Restrict processing of your data
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information is collected and how it's used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your rights

To exercise any of these rights, please contact us at privacy@lumaresume.com or use the account deletion feature in your account settings.

8. Chrome Extension

Our Chrome extension ("LumaResume - Job Saver") allows you to save job listings from supported websites directly to your LumaResume account.

Data Collected by the Extension

• Job Listing Data

  Job title, company name, location, salary (when available), and job description text - only when you click 'Save Job'

• Source Information

  URL of the job listing and the source platform (LinkedIn, Indeed, Greenhouse, etc.)

• Authentication

  Session cookies to verify your LumaResume account - we do not store your login credentials

What We Do NOT Collect

• Your browsing history
• Personal information from job sites
• Data from pages where you don't click 'Save Job'
• Passwords or payment information

Supported Platforms

The extension extracts job data from:

Job Boards: LinkedIn, Indeed, Glassdoor, Dice, ZipRecruiter

ATS Systems: Greenhouse, Lever, Workday, Eightfold AI

Other: Generic company career pages

Extension Permissions

The extension requires certain browser permissions to function: reading the active tab content when you click the extension, storing your preferences locally, and communicating with lumaresume.com. These permissions are used solely for the purpose of saving job listings and are never used for tracking or advertising.

9. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and third-party service providers are located. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice via email or Platform notification. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

We will respond to your inquiry within 30 days.