Last updated: 11 Oct 2026

Privacy policy

What we collect, why, who helps us process it, and how to get a copy or delete it.

Who we are

Organize My Resume is run by CodesAndChips Computer Programming Services. For privacy questions, use the contact form or email admin@organizemyresume.com.

What we collect

Account: your name, email address and a hashed password (we never store the password itself).
Resumes: the file you upload, the text we extract from it, and every version you save in the editor.
Job postings you paste or fetch from a link, and the analyses we produce from them: scores, the term-by-term breakdown, recruiter-readability flags and tips. Tips are stored in the analysis, so they are deleted with your account and included in your data download.
Cover letters you ask us to write: the job description you gave, any company or hiring manager name you typed, the first version we wrote and your edited version. They are stored with the resume they were written from, so they are deleted with that resume or with your account, and they are included in your data download.
Follow-up emails you ask us to write: the job description you gave (or the one stored with the cover letter you chose), any company or contact name and note you typed, the kind of email, the first version we wrote and your edited version. They are stored with the resume they were written from, so they are deleted with that resume or with your account, and they are included in your data download.
Plan and usage: your plan or pass, its dates, counts of analyses, cover letters, follow-up emails and exports so we can apply your limits, and any promo code you use with what it gave you.
Payments: none yet. Paid passes aren't on sale, so we collect no payment information. When they are, we'll record the pass bought, amount, currency and payment status; card and e-wallet details will go straight to the payment provider and we will never see or store them.
First-party analytics: a short list of events (for example sign-up, upload, analysis, cover letter, follow-up email, export, checkout, payment) with your account ID or a random ID, and the time. These events hold no resume or job-posting text and no IP addresses, and we use no third-party trackers. Server logs are covered under "How long we keep it".
Where you came from: when you arrive through a link with a tag, or from another website, your browser keeps the source (for example "google" or "reddit") and the first page you landed on for up to 30 days, and we add them to your sign-up so we can learn which pages help people. We also count each visit once per browser tab, with the same two details and no ID. These records hold no IP address and not the full address of the page you came from, and we don't track you across other sites. If your browser sends Do Not Track or Global Privacy Control, we skip all of this.
Messages you send through the contact form. Each one is also emailed to our support mailbox.

How we use it

To score your resume, show the breakdowns, give you tips, write the cover letters and follow-up emails you ask for, and create PDF or Word exports.
To run your account: sign-in, email verification, password resets, receipts and account notices.
To apply plan limits.
To help you when you write to us: we can resend a verification email, send you a password reset link, change your plan, or pause or delete your account if you ask or if the terms are broken.
To find and fix problems, using counts and error logs that never contain resume text.

We don't sell your data, we don't show ads, and we don't use your resumes to train AI models.

Who can see your data

One person runs Organize My Resume and can use our admin tools. They sign in with a password and a code from an authenticator app. The tools show your account status, plan, usage counts and any message you send us. They don't show your resumes, job postings, analyses or files. We only look at the content of a resume if you ask us to fix a problem with it, and only what's needed to fix that problem. Every action taken on an account is logged, and those log entries are deleted after 12 months.

Who processes it for us

Processor	What for
Microsoft Azure	Hosting, database and file storage stay in Southeast Asia (Singapore). When AI-written tips are on, or when you ask for a cover letter or a follow-up email, the text of your resume and the job posting, and any company, hiring manager or contact name and any note you typed, is sent to Microsoft Foundry (Azure OpenAI) only to write the tips, the letter or the email, under terms that don't allow training on them. These AI requests may be processed outside Southeast Asia. Microsoft may keep the request for up to 30 days to check for misuse. General tips are written without AI and send nothing to it.
Brevo	Sending account emails (verification, password reset, receipts, notices).
Cloudflare Turnstile	A bot check on the sign-up and forgot-password forms only. Cloudflare's script loads on those two pages and sees your browser details and IP address to tell people from bots. It sees no resume or account data.

Paid passes aren't on sale yet. Before we take any payment, we'll list our payment providers here.

How long we keep it

Your data stays while your account exists. Delete a resume and its file, versions, analyses, cover letters and follow-up emails go with it.
Accounts with no sign-in or resume activity for 60 days are deleted, with a warning email 14 days before.
After you delete something, copies can remain for up to 7 days: in our database backups, and in file storage, which keeps deleted files for 7 days before they are gone for good.
Our servers log each request (time, page address, your IP address and any error) for 3 days, and error and performance logs are kept for 30 days. They don't contain the text of your resumes or job postings.
Contact-form messages are kept until you ask us to delete them. If you wrote to us while signed in, deleting your account removes them too.
The record of admin actions on accounts is kept for 12 months.
Payment records, once passes are on sale, are kept for 5 years, or longer if the law requires.

Your rights

Wherever you live, you can see, correct, download and delete your data:

Get a copy: Settings → Download my data gives you a zip of everything we hold, including your original files.
Correct it: edit your profile and resumes at any time.
Delete it: Settings → Delete account removes your account, resumes, versions, analyses, cover letters, follow-up emails and files, and messages you sent while signed in.
For anything else, contact us. We reply within 30 days.

We process personal data under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). It gives you the right to be informed, to access your data, to object, to have it corrected, erased or blocked, to data portability, to damages, and to complain to the National Privacy Commission.

Security

Passwords are hashed, traffic is encrypted in transit, and our cloud provider encrypts stored data. Sign-in tokens expire and rotate, repeated failed sign-ins are slowed and temporarily blocked, and our database is not reachable from the public internet.

If a breach puts your personal data at risk, we will tell the people affected and, where the law requires it, the National Privacy Commission within 72 hours of learning of it.

Age

The service is for people aged 18 and over.

Changes

We'll email you before any material change to this policy takes effect.