Privacy policy

Who we are

This service is Resymetry, run by an individual based in North Macedonia (not a company). “We” on this page means Resymetry. We decide how your information is used (we are the “controller”). Contact us about privacy at hello@resymetry.com.

The short version

• We store your CV file, encrypted, so your report can be shown on the document itself. It is deleted after 30 days, with everything else.
• We never store the full text of your CV. It is read in memory and discarded.
• We keep a structured summary of your CV (skills, roles, dates) and your results for 30 days, then delete them.
• We only keep your name, email and phone number if you tick the box that asks for it.
• We do not sell your information, and we do not use advertising trackers.
• We do not need an account, so we do not know who you are unless you tell us.

What we process, and why

Your CV. When you upload a CV, we read its text to analyse it. The text itself is kept only in memory while the analysis runs and is never saved, and we never store your CV’s file name. Why: to provide the analysis you asked for.

Your CV file. We keep the file you uploaded, encrypted at rest, so your report can show each point on the document itself instead of only describing it. It is readable only by this service, it is never used for anything else, and it is deleted after 30 days along with your results. Anyone holding your private report link can open it, which is the same access the report itself has. Why: to show you where in your CV each finding applies.

A structured summary of your CV. We extract facts such as skills, job titles, employers, dates, education and achievements. This summary deliberately leaves out your name, email, phone number, address and links. Why: to produce your result and let you view it again.

The role and job description you enter, and your results (scores, findings and the full report). Why: to show you your result and, if you pay, the full report.

Your name, email and phone number — only if you agree. If you tick the box that says “I agree that Resymetry can save my name, email and phone number from my CV and email me about my results and CV tips. I can unsubscribe and have my details deleted at any time.”, we take these three details from the top of your CV and store them with a record of when you agreed and to which wording. Details of anyone else in your CV, such as referees, are not collected. Why: to contact you about your results and CV tips, as the box says, and for nothing else.

Technical information. We keep a one-way, keyed fingerprint of your IP address — not the address itself — and set a random ID cookie in your browser (stored by us only as a one-way fingerprint) to limit how many free analyses can be run each day. Why: to prevent abuse and control costs.

On your device. Your browser remembers your last few reports (a private link code, the role and the score — nothing from your CV) so you can reopen them, and your light or dark theme choice. This stays in your browser; you can remove an entry with “Forget”, or clear it with your browser’s site data. We use no tracking cookies. Why: so you do not lose a report, especially one you paid for.

Visit statistics, if analytics is enabled. We use Umami, open-source analytics that sets no cookies and builds no profile of you. It counts page views and which steps of the product are used — for example that an analysis was started or a report opened. It never receives your CV, your job description, your results, your contact details or your report link. Why: to see which parts of the product people use, without tracking anyone.

Payments. Payments are handled by Dodo Payments, which acts as the seller of record and processes your card details. We never see or store card details; we only receive confirmation that a payment for your analysis was made, and the payment provider’s own reference for it.

Legal basis

• Analysing your CV and providing your report: necessary to provide the service you request (contract).
• Keeping your contact details and contacting you: your consent, which you can withdraw at any time.
• Rate limiting and security: our legitimate interest in keeping the service available and safe.

Who we share it with

We share information only with the service providers needed to run Resymetry:

• OpenAI (United States) — processes your CV text and job description to produce the analysis. Under OpenAI’s API terms, data sent through the API is not used to train its models by default.
• Our hosting provider — hosts the website and database.
• Dodo Payments — processes payments and acts as the seller of record. It receives your payment details directly; we never see them.

Some of these providers are based outside North Macedonia, the UK and the EU, including in the United States. Where that applies, transfers are covered by the providers’ standard contractual safeguards. We do not sell your information or share it for advertising.

How long we keep it

• Your CV file: stored encrypted, so your report can be shown on the document itself. Deleted 30 days after the analysis, with everything else.
• The full text of your CV: not stored at all.
• Structured CV summary, job details and results: deleted 30 days after the analysis.
• Name, email and phone number (if you agreed): deleted when you unsubscribe, and in any case 12 months after you agreed.

Security

Each analysis is identified by a long random code that only you hold, so no one else can look it up. Your private report link contains that code after a “#”, a part of the address browsers never send to our server. Anyone you give the link to can open the report, and your uploaded CV with it. Uploaded files are checked before they are read, stored encrypted rather than in the clear, never placed in a public folder, and connections are encrypted. We keep CV contents and contact details out of our logs.

Your rights

You can ask to access, correct or delete your information, object to how we use it, or withdraw consent. Every email we send includes an unsubscribe link, which deletes your contact details immediately. For anything else, email hello@resymetry.com. Because we do not have accounts, we may ask you to identify your analysis so we can find it.

If you are unhappy with how we handle your information, you can complain to the Personal Data Protection Agency of North Macedonia, or to the data protection authority where you live (in the UK, the Information Commissioner’s Office).

Children

Resymetry is not intended for anyone under 16.

Changes

If we change how we use your information, we will update this page and the date at the top. If you agreed to be contacted, we will not use your details for a new purpose without asking again.