Privacy Policy
Last updated: September 1, 2026
Overview
ResumeON ("we", "our", "us") operates the resumeon.com platform. This Privacy Policy explains how we collect, use, and protect information when you use our services.
Information we collect
- Account information such as name, email, and profile image
- Candidate profile data including skills, projects, and availability
- Employer profile data including company name and job postings
- OAuth profile data imported when job seekers sign in with Google, GitHub, or LinkedIn
- Issue reports submitted via our Report an issue form, including optional evidence uploads
- Content submission logs (IP address, user agent, timestamp) when jobs or profiles are published
- Login event metadata for security and intermediary due diligence
- Usage data and technical logs for security and performance
Sign-in with Google, GitHub, or LinkedIn
Job seekers may sign in to ResumeON using Google, GitHub, or LinkedIn. Employers sign in with company email OTP only and do not use these OAuth providers on ResumeON.
When you choose a provider, you are redirected to that provider's sign-in screen. If you approve access, we receive information needed to create or link your ResumeON account, such as your name, email address, profile photo, and provider account identifier.
- Google: We use basic identity scopes (OpenID, email, and profile) for sign-in. We do not request access to Gmail, Drive, Calendar, or other Google account data.
- GitHub: We may import public profile details and, with your approval, repository metadata to help pre-fill your job seeker profile. You can review and edit imported data before publishing.
- LinkedIn: When enabled, we use LinkedIn OpenID Connect for sign-in and may import basic profile fields you approve.
Each provider processes your data under its own privacy policy. Review the relevant policy before signing in:
Third-party service providers
We use trusted processors to operate ResumeON, including hosting, database, email delivery, authentication, and file storage providers. OAuth sign-in also involves Google, GitHub, and LinkedIn when you choose those options. These providers may process data outside India. We use contractual and technical safeguards intended to protect your information.
How we use information
- Provide matching, search, and profile services
- Authenticate users and maintain sessions
- Improve platform features and prevent abuse
- Communicate service-related messages such as OTP codes
Public profiles
Published candidate profiles are visible on the public talent directory. Salary expectations are never displayed publicly. Employers may view structured profile data for matching purposes.
Your data controls
Job seekers and employers can manage their own data directly in the product:
- Download: Export your account and profile data anytime from Settings as a JSON file.
- Delete: Permanently delete your account and profile anytime from Settings.
Job seeker controls are available at /candidate/settings. Employer controls are available at /employer/settings.
Compliance logging and reports
ResumeON maintains records to help prevent fraud and respond to lawful requests under applicable Indian law, including IT Act intermediary due diligence obligations:
- Report an issue: Anyone may submit safety reports at /report, including optional screenshot or PDF attachments reviewed by admins only.
- Submission logs: When jobs, profiles, or resumes are published, we log the actor, target, timestamp, and request metadata such as IP address and user agent.
- Compliance archives: When you delete your account or an employer closes a job, we remove live listings promptly but retain a JSON compliance archive for at least 180 days for legal, fraud investigation, and lawful authority requests.
Data retention
We retain account and profile data while your account is active. When you delete your account, we remove your live profile and listings from ResumeON after saving a compliance archive. Issue reports, submission logs, login events, and compliance archives are retained for at least 180 days and longer where required by law, security, or dispute resolution.
Cookies and tracking
We use cookies and similar technologies for authentication, security, and preferences. See our Cookie Policy.
India (DPDP Act)
If you are in India, ResumeON processes personal data in line with the Digital Personal Data Protection Act, 2023. Our DPDP Act Notice explains how we comply in practice, including consent, security, data principal rights, grievance redressal, and cross-border processing.
Contact
Questions about this policy? Contact us at privacy@resumeon.com.