Privacy Policy

Last updated: October 2026

1. Who is responsible

RJethai Studio, a sole proprietorship of Shitalben Sureshbhai Jethva, C-601 Kalyan Residency, Near Jalaram School, Palanpur, Surat 395009, Gujarat, India, e-mail info@rjethaistudio.com, is responsible for your personal data (“Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023, and “controller” under the EU/UK General Data Protection Regulation, GDPR).

Grievance Officer / contact for data protection: Shitalben Sureshbhai Jethva, info@rjethaistudio.com.

EU representative (Art. 27 GDPR): [Name and address of your EU representative – required once you regularly serve EU customers from India].

2. Your documents are stored on your device

Your CV, photo, cover letters, templates and the job postings you paste are stored only inside your browser (localStorage / IndexedDB). We do not store them on our servers. Only when you press an AI tailoring button are they sent for processing (see section 4). They are linked to your account on that device and are deleted from the device when you sign out.

3. What we process

• Account: e-mail address, (with Google sign-in) your name, sign-up and sign-in times – to provide your account. Basis: contract (GDPR Art. 6(1)(b)); your consent / legitimate use under the DPDP Act.
• Usage counter: how many documents you downloaded, stored as one-way codes without any content – to apply the free limit.
• Fair-use protection: one-way HMAC codes of your normalised e-mail address, a random device ID from your browser and of the name and phone number in your CV, kept for 12 months – to stop abuse of the free trial. We cannot turn these codes back into the original data. Basis: legitimate interest (GDPR Art. 6(1)(f)).
• Subscription: status, renewal date and the time you agreed to the immediate start of the subscription.
• Server logs: IP address, time, page and browser type, for security – kept briefly by our host.
• Cancellations and messages: what you send us, to handle your request.

We use no advertising, tracking or analytics cookies. Only storage that is strictly necessary for the service is used.

4. Who receives data (processors)

• Netlify, Inc. (USA) – hosting of the website.
• Supabase – sign-in and database, servers in the European Union (Ireland).
• Google – only if you choose “Continue with Google”.
• Anthropic (Anthropic, PBC, USA, and its affiliates) – AI processing, only when you use AI tailoring: the text of your CV, the job posting and your cover letter are sent encrypted through our server to Anthropic’s Claude model to create the tailored or translated version. We do not store this content; our server only counts the request (user ID, time, a one-way hash of the request). According to Anthropic’s commercial terms, API inputs are not used to train its models and are deleted after a short retention period. Transfers outside the EU rely on the standard contractual clauses in Anthropic’s data processing terms. Basis: contract (GDPR Art. 6(1)(b)) – you request the service.
• Paddle (Paddle.com Market Limited, 30 Old Bailey, London EC4M 7AU, United Kingdom) – our reseller and Merchant of Record. Paddle processes your name, e-mail, country, payment and tax data as an independent controller to sell you the subscription; see Paddle’s privacy notice. We never see your full card or bank details. The Paddle payment window is loaded only when you click “Subscribe”.

Data may be processed outside your country (e.g. in the EU, UK or USA). Where the GDPR applies, transfers rely on adequacy decisions (EU–US Data Privacy Framework, UK) or standard contractual clauses.

5. How long we keep data

Account data: until you delete your account (you can do this yourself at any time under “Delete my account”). Fair-use codes: 12 months. Records of cancellations and of your consent: until limitation periods expire. Invoices are kept by Paddle as required by tax law.

6. Your rights

You can ask for access to, correction, completion, update and erasure of your personal data, withdraw consent, and nominate another person to exercise your rights in case of death or incapacity (DPDP Act). Under the GDPR you also have the right to restriction, data portability and to object to processing based on legitimate interest. Just write to info@rjethaistudio.com. If you are not satisfied, you can complain to the Data Protection Board of India, or – in the EU/EEA/UK – to your local data protection authority.

7. Children

RJethai Resume is meant for adults. We do not knowingly process data of anyone under 18.

8. Security

All connections are encrypted (HTTPS). Account data is protected on the server so that no other user can read or change it.

9. Changes

We update this policy when our service or the law changes. The version published here applies.

Reviews. If you write a review, we store your star rating, your text, the name you choose to show and your account ID. Reviews are only published after we check them; you can change your review at any time, and it is deleted together with your account.