Privacy Policy

What we collect

• Your email address, because a digital product has to be delivered somewhere.
• Order details — tier, amount, currency, country, city, payment processor and its reference. We keep these because tax authorities require it.
• Anonymous usage events — page views, how far down the page a session scrolled, which sections were seen, device type, and the utm tags on the link that brought you. These carry a random session id that is discarded when you close the tab.
• Your country, derived at Cloudflare's edge from your connection, purely to show the right price and payment methods.

What we do not collect

• Your card details. Those go straight to the payment processor and never touch our servers.
• Your name, unless you write to us and sign an email.
• The contents of any résumé you make. The templates run on your computer; nothing is uploaded.
• Your IP address in readable form. Download requests store a salted one-way hash of it, to catch link sharing.

Cookies and tracking

We set no advertising cookies and run no third-party tracking scripts. The site stores two things in your own browser, which never leave it: your chosen region, and whether you turned animations off. Analytics use a random per-session id in sessionStorage, not a cookie, and it cannot be linked to you across sessions or sites.

Who else sees your data

• Cloudflare — hosting, database and file storage.
• Razorpay, Paddle, Dodo Payments, PayPal — whichever processed your payment.
• Resend — sends your delivery email.

We do not sell, rent or share your data with anyone else. There is no mailing list unless you ask to join one.

How long we keep it

• Orders: as long as tax law requires, then deleted.
• Download records: 90 days after the link expires.
• Usage events: 90 days, then deleted automatically.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@resumetica.com and we will do it within 30 days. If you are in the EU or UK, our lawful basis is contract performance for delivery and legitimate interest for anonymous analytics, and you may complain to your national data protection authority.

Security

Everything runs over TLS. Payment credentials are encrypted at rest with AES-GCM and are never exposed to any browser. Download links are individually signed, expire in 24 hours, and stop working after five downloads.