ResuMail uses Google OAuth to allow users to connect their Gmail accounts and send emails from their own Gmail accounts through the ResuMail application. This Privacy Policy explains how ResuMail ("ResuMail", "we", "us", "our") collects, uses, stores, and shares information when you use our website and services.

• 1) Who we are

  ResuMail is a productivity service that helps users prepare, schedule, and send outreach emails from their Gmail accounts.

• 2) Information we collect

  Information you provide: account details (name, email), an optional phone number and city/region you may add to your profile, your resume content (work history, skills, education, links), and support requests.

  Information collected automatically: device and usage data (IP address, browser type, pages viewed) for security and analytics.

  On iOS, with your permission via the App Tracking Transparency prompt, we collect Apple's Identifier for Advertisers (IDFA) so our advertising partners can attribute installs and app events to specific ad campaigns. If you decline the prompt, no IDFA is collected and the app works the same.

  Google user data (when you connect Gmail): basic profile info and email address to identify your connected account, and the ability to send emails on your behalf.

• 3) Google user data we access

  ResuMail requests the minimum OAuth scopes needed for core functionality:

  • Gmail send (sensitive scope): used only to send emails when you explicitly create and trigger a send or schedule action in the ResuMail application. Scheduled emails are sent only according to settings you configure.

  • Basic account information (profile and email): used to identify your account and show the connected address in ResuMail.

  ResuMail does not read your inbox, view email history, access threads, or retrieve message content from Gmail.

• 4) How we use information

  We use information to operate the service, send the outreach emails you compose, improve performance, and prevent abuse.

  We send you transactional and service emails — for example, a welcome message after signup, purchase and subscription receipts, renewal and refund notifications, security alerts, and important changes to your account or to this policy. These messages are required to operate the service and cannot be opted out of separately from deleting your account.

  We may also send promotional messages — product announcements, feature launches, tips, or special offers — but only if you have opted in. Every promotional email includes a one-click unsubscribe link.

• 5) Data storage and retention

  We store your account information, connected Google account email, OAuth tokens needed to maintain the connection, and the email drafts/scheduled messages you create in ResuMail.

  ResuMail does not store or access any existing emails from your Gmail inbox. Only the email content that you compose or schedule within ResuMail is stored for delivery purposes.

  We retain data only as long as needed to provide the service or comply with legal obligations, retaining only de-identified billing or legal records we are required to keep. See section 8 below for how to delete your account.

• 6) Purchases and subscriptions

  Subscriptions and credit packs purchased inside the ResuMail mobile apps are processed entirely by the platform store: Apple In-App Purchase (StoreKit) on iOS, and Google Play Billing on Android. ResuMail never receives or stores your payment method, card number, Apple ID, Google account payment profile, or billing address.

  The store shares with us only a transaction identifier, the product purchased, and renewal, refund, or cancellation status (via App Store Server Notifications on iOS and Real-Time Developer Notifications on Android). We use this information solely to grant the entitlement to your account and to keep your billing state in sync. You can manage or cancel your subscription at any time — on iOS in Settings → Apple ID → Subscriptions, and on Android in the Google Play Store → Profile → Payments & subscriptions → Subscriptions. The store owns that billing relationship.

• 7) Mobile app data

  The ResuMail iOS and Android apps do not request access to your contacts, photos, location services, microphone, camera, calendar, health data, SMS, call logs, or any other sensitive device permissions. Push notifications are off unless you opt in. The data we collect via the mobile apps is the same as via the web: your account profile, resume content, and outreach activity you create inside ResuMail.

  On iOS, the app shows an App Tracking Transparency prompt on first launch asking permission to use the IDFA for ad attribution. You can decline — the app works the same either way. You can change this choice at any time in Settings → Privacy & Security → Tracking.

• 8) Account and data deletion

  You can delete your ResuMail account at any time from Profile → Delete account in the iOS app, the Android app, or on the web. Deletion immediately revokes Google API access, removes your profile and resume content from active systems, and queues purge of associated data within 30 days. We retain only the minimum de-identified records required for tax, accounting, or legal compliance.

  If you have an active store-side subscription, deleting your ResuMail account does not cancel the subscription with the store. To cancel future renewals: on iOS, go to Settings → Apple ID → Subscriptions; on Android, open the Google Play Store → Profile → Payments & subscriptions → Subscriptions, and cancel ResuMail Pro there.

• 9) Data protection and security controls

  We use administrative, technical, and physical safeguards to protect sensitive data, including Google OAuth credentials and email content created in ResuMail.

  • Encryption in transit: data transmitted between your browser, ResuMail, and integrated services is protected using HTTPS/TLS.

  • Encryption at rest: sensitive data in our databases and storage systems is encrypted at rest, including OAuth credentials used to maintain your connected account.

  • Access controls: production data access is limited to authorized personnel with role-based access permissions and least-privilege principles.

  • Credential protection: OAuth tokens and secrets are stored securely and never exposed in public client code.

  • Monitoring and logging: we monitor systems for suspicious activity and investigate potential security incidents.

  • Data minimization: we request only the minimum Google OAuth scopes needed and only process data required to provide the service.

• 10) Data sharing

  We do not sell your data. We share information only with service providers that help us operate ResuMail and when required by law. Categories of service providers we use:

  • Cloud hosting and storage (Amazon Web Services in eu-north-1) — runs the ResuMail backend, database, and resume file storage.

  • Email delivery (Google Gmail) — sends the outreach emails you compose, using your own connected Google account on your behalf.

  • Payment processing (Apple In-App Purchase on iOS, Google Play Billing on Android, Cashfree on web) — handle the purchase flow. We do not see or store payment instruments.

  • Application monitoring and logs (AWS CloudWatch, Grafana Cloud) — for service health and debugging. Logs do not include resume content or email bodies.

  • Advertising attribution (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.) via the Facebook SDK — receives app install and activation signals, custom in-app events (e.g. signup, mailbox linked, purchase), and the IDFA when you grant App Tracking Transparency on iOS. Used to measure Meta ad campaign performance.

  • App analytics and ad attribution (Google LLC) via Firebase / Google Analytics for Firebase, linked to Google Ads — receives screen views, session metadata, custom events, the Firebase app instance ID, and the IDFA when ATT is granted. Used to measure app usage and attribute installs to Google Ads campaigns.

• 11) AI and automated processing

  ResuMail uses AI services from OpenAI to power some of its features. The categories of data we send to OpenAI are:

  • Resume content you upload, to populate the fields of your ResuMail profile.

  • Your job preferences (role, seniority, location, etc.), to help match you with relevant jobs.

  • The recruiter's public information and selected fields from your profile, when you ask ResuMail to draft an outreach email. You always review and approve the draft before sending.

  Per OpenAI's API terms, content sent to OpenAI's API is not used to train OpenAI's models. ResuMail does not use any other AI service to process your data.

  If you would prefer that we not process your resume through AI, you can fill the profile fields manually instead of uploading a resume PDF. Email drafting requires AI to operate; if you do not want AI-drafted emails, you can stop using the outreach feature. You can delete your account at any time.

• 12) Human access to data

  Access to user data is restricted to authorized personnel and only when necessary for support requests, security investigations, or legal compliance.

• 13) Google API Services - Limited Use

  ResuMail's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, profiling, or selling to third parties.

  Google API Services User Data Policy

  We do not use Google user data to train machine learning or artificial intelligence models.

• 14) Your choices

  You can revoke ResuMail's access from your Google Account security settings at any time. To delete your ResuMail account, see section 8.

  You can opt out of promotional and product-announcement emails at any time using the unsubscribe link included in every such message. Opting out of promotional emails does not stop transactional or service emails (welcome message, purchase receipts, security alerts, account notifications), which are required to operate the service.

• 15) Children's privacy

  ResuMail is not intended for children under 13. We do not knowingly collect data from children.

• 16) Changes to this policy

  If we change how we access or use Google user data, we will update this policy and obtain new consent where required.

• 17) Contact

  Email: support@resumail.in