Privacy Policy

1. Introduction

Welcome to Resume Pilot, operated by Global Growth Technologies Inc. ("GGT", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered career advancement platform.

By using Resume Pilot, you consent to the data practices described in this policy. If you do not agree with this policy, please discontinue use of our services.

This Privacy Policy should be read in conjunction with our Terms of Service.

2.1 Information You Provide to Us

We collect information that you voluntarily provide when using our Service:

Account Information:

• Email address
• Password (encrypted and never stored in plain text)
• Profile information (name, professional title, location)

Career Documents:

• Resumes and CVs (in PDF or DOCX format)
• Cover letters
• Job descriptions for matching purposes
• Career goals and preferences

Communication Data:

• Support tickets and correspondence
• Feedback and survey responses
• Messages sent through our platform

Payment Information:

• Billing details (processed securely through third-party payment processors)
• Subscription plan and payment history
• Note: We do not store full credit card numbers

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

Usage Data:

• Pages viewed and features used
• Time spent on different sections
• Search queries and filters applied
• Interactions with AI-generated content

Device and Technical Information:

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Screen resolution

Cookies and Tracking Technologies:

• Session cookies for authentication
• Preference cookies for user settings
• Analytics cookies to understand usage patterns

2.3 Information from Third Parties

We may receive information from third-party services you choose to connect with Resume Pilot, such as professional networking platforms or job boards. We only collect information you explicitly authorize these platforms to share.

We use the collected information for the following purposes:

3.1 To Provide and Improve Our Services

• Analyze resumes and generate personalized recommendations
• Match you with relevant job opportunities
• Provide AI-powered career advice and interview preparation
• Generate QR codes for resume sharing
• Track your career progress and achievements

3.2 To Train and Improve Our AI Models

We use aggregated and anonymized data to train our machine learning algorithms, improving the accuracy and relevance of our AI-generated insights. Personal identifiers are removed before data is used for model training.

3.3 For Account Management

• Create and maintain your account
• Process subscriptions and payments
• Provide customer support
• Send service-related notifications

3.4 For Communication

• Respond to your inquiries and support requests
• Send important updates about the Service
• Notify you about new features or changes
• Send promotional content (with your consent)

3.5 For Security and Compliance

• Detect and prevent fraud or abuse
• Monitor for security threats
• Comply with legal obligations
• Enforce our Terms of Service

We do not sell your personal information. We may share your information in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, such as:

• Cloud hosting and data storage (Supabase)
• Payment processing
• Email delivery services
• Analytics and performance monitoring
• Customer support tools

These providers are contractually obligated to protect your information and use it only for the specified purposes.

4.2 AI and Machine Learning Partners

We may share anonymized and aggregated data with AI research partners to improve natural language processing and career matching algorithms. No personally identifiable information is shared in this context.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or legal processes
• Requests from government authorities
• Enforcement of our Terms of Service
• Protection of our rights, privacy, safety, or property
• Emergency situations involving public safety

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change via email or prominent notice on our Service.

4.5 With Your Consent

We may share your information with third parties when you explicitly authorize us to do so, such as when connecting your account with external job boards or professional networks.

We implement industry-standard security measures to protect your information:

5.1 Technical Safeguards

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure password hashing with industry-standard algorithms
• Regular security audits and vulnerability assessments
• Protection against breached passwords (HaveIBeenPwned integration)

5.2 Access Controls

• Role-based access control (RBAC)
• Row Level Security (RLS) on all database tables
• Multi-factor authentication for administrative access
• Regular access reviews and audits

5.3 Organizational Measures

• Employee training on data protection
• Confidentiality agreements with staff and contractors
• Incident response procedures
• Regular security awareness programs

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy:

6.1 Active Accounts

We retain your account data and uploaded documents while your account remains active. You can delete specific documents or your entire account at any time through your account settings.

6.2 Closed Accounts

After account closure, we may retain certain information for:

• Legal compliance (e.g., tax records: 7 years)
• Dispute resolution
• Fraud prevention
• Anonymized analytics and AI model improvement

6.3 Anonymized Data

Data that has been fully anonymized and cannot be linked back to you may be retained indefinitely for research and service improvement purposes.

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to access your personal data and request a copy in a portable format. You can download your data through your account settings.

7.2 Correction

You can update or correct your information at any time through your account settings. For assistance, contact us at info@git-gotech.com.

7.3 Deletion

You can delete specific documents or your entire account. Note that some information may be retained as required by law or for legitimate business purposes.

7.4 Opt-Out of Communications

You can opt out of promotional emails by clicking the "unsubscribe" link in any marketing email. Note that you will still receive essential service-related communications.

7.5 Cookie Management

You can control cookies through your browser settings. Note that disabling certain cookies may limit functionality of the Service.

7.6 Object to Processing

You may object to certain uses of your data, particularly for marketing purposes. Contact us to exercise this right.

8. Children's Privacy

Resume Pilot is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have collected information from a child under 18, we will take steps to delete such information immediately. If you believe we have collected information from a child, please contact us at info@git-gotech.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses to ensure your data receives adequate protection.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

Note: We do not sell personal information. To exercise your CCPA rights, contact us at info@git-gotech.com.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Legal Basis for Processing: We process your data based on:

• Performance of our contract with you (Terms of Service)
• Your consent for specific processing activities
• Our legitimate interests in improving our Service
• Compliance with legal obligations

In the event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours of discovering the breach
• Provide details about the nature and scope of the breach
• Explain the steps we are taking to address the breach
• Offer guidance on how to protect yourself
• Notify relevant regulatory authorities as required by law

13. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to these external sites.

We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any external services you interact with.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We will update the "Last Updated" date at the top
• We will notify you via email for material changes
• We may display a prominent notice on the Service

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data subject access requests or to exercise your privacy rights, please use the subject line "Data Rights Request" in your email.