Privacy Policy

Privacy at a glance

The short version

1. Scope

When this policy applies

This Privacy Policy applies to TinyResumes and the services made available through tinyresumes.com (collectively, the “Service”). In this policy, “TinyResumes,” “we,” “us,” and “our” refer to the operator of the Service. “You” means an account holder, a visitor to a public résumé, or another person who uses the Service.

This policy does not apply to third-party websites, services, or job platforms linked from a résumé. Their privacy practices are governed by their own policies.

2. Information we collect

Information you provide and information created through use

Account information

We collect information needed to create and administer an account, including your name, email address, password in hashed form, email-verification status, plan, security settings, and account lifecycle dates.

Résumé and profile content

We collect the information you choose to enter or upload, such as your name, professional title, location, availability, summary, employment history, education, certifications, skills, technologies, profile photograph, contact details, custom links, styling choices, and résumé handle. Because résumé content is user-directed, it may include other personal information you choose to provide. Please do not include Social Security numbers, government identification numbers, financial-account details, medical records, or other information that is unnecessary for a professional résumé.

Private Job Tracker content

If you use Job Tracker, we store the opportunity details you enter, such as company, role, posting URL, location, application date, stage, next action, due date, notes, and closed outcome. Job Tracker content is private account data. It is not placed on public résumés, in search metadata, or in the public sitemap.

Communications

If you contact us, we may collect your contact details, the content of your message, attachments you intentionally provide, and information needed to investigate and respond.

Technical and usage information

When someone uses the Service, our systems and hosting providers may receive technical information such as IP address, browser and device information, operating system, language, timestamps, requested pages, referring website, and diagnostic or security events. We use this information to operate, secure, troubleshoot, and understand the Service.

3. How we use information

Purposes for processing information

We may use personal information to:

• Create, authenticate, secure, and maintain accounts;
• Create, save, preview, publish, display, export, and share résumés at your direction;
• Provide résumé handles, redirects, QR codes, PDFs, contact cards, machine-readable JSON and Markdown formats, and visitor insights;
• Send verification, security, account-expiration, service, and support communications;
• Apply plan limits, operate Free-account expiration, and provide paid features when available;
• Detect fraud, abuse, automated traffic, security incidents, and violations of our terms;
• Diagnose errors, maintain performance, improve usability, and develop Service features;
• Comply with law, enforce agreements, and protect users, TinyResumes, and the public; and
• Create aggregated or de-identified statistics that do not reasonably identify an individual.

4. Public résumés and your publishing choices

Publishing makes selected information available to others

Draft résumés are private to the account holder and authorized TinyResumes personnel or service providers who require access to operate or support the Service. When you publish a résumé, its public fields become available to anyone who has its link. You decide whether supported contact fields are displayed.

A published résumé may also be available in machine-readable JSON and Markdown formats. Those formats contain only the fields visible on the public résumé and never include private Job Tracker data, administrative information, or contact fields you have chosen to hide.

Publishing and search or AI discovery are separate choices. A published résumé can be accessible by its direct URL while excluded from the TinyResumes sitemap and marked for search tools not to index. If you enable discovery, search engines and AI-powered search services may discover, cache, summarize, cite, or display the résumé. This setting does not grant permission to use the résumé for AI model training. Search services and people who access a public résumé may retain copies outside our control. Removing or unpublishing a résumé does not guarantee immediate removal from third-party caches or records.

5. Visitor insights

Privacy-limited résumé activity

If a visitor affirmatively allows limited analytics, TinyResumes may provide the résumé owner with activity information such as the time, referring source, broad location supplied by infrastructure providers, general device category, and the type of action used. Location and source information can be missing or approximate. A visit or action is not added to visitor insights before that permission is given.

The visitor-insight system does not store a visitor's full IP address. It creates a one-way pseudonymous value using a generalized network range, user-agent information, language, and a secret application key for deduplication and abuse prevention. Résumé owners are not shown this value, the visitor's IP address, a logged-in account identity, or a purported name or employer. We do not promise to identify who viewed a résumé.

We exclude the résumé owner's own logged-in activity, recognized bots and link-preview services, obvious duplicate refreshes, and requests presenting supported Global Privacy Control or Do Not Track signals from visitor insights.

6. Cookies and similar technologies

Essential operation and limited measurement

We use strictly necessary cookies to sign users in, maintain sessions, protect forms, remember privacy preferences, and secure the Service. These cookies are always active because the requested Service cannot operate safely without them. Blocking essential cookies may prevent account and editor features from working.

Limited résumé analytics are optional and remain off until you select Allow résumé analytics. You can separately choose Keep analytics off, review the two purposes, or change your choice at any time through the always-available Privacy choices control. Withdrawing analytics permission is as easy as granting it.

We retain a pseudonymous consent identifier, the policy version, your analytics choice, its source, and the time recorded so we can honor and demonstrate your preference. The browser preference cookie expires after 180 days, after which we ask again. TinyResumes does not use information for cross-context behavioral advertising and does not sell personal information.

Global Privacy Control and Do Not Track

Where a request presents a supported Global Privacy Control (“GPC”) or Do Not Track (“DNT”) signal, TinyResumes treats analytics as disabled on that device and excludes the request from résumé visitor insights, even if an earlier cookie preference allowed analytics. Because standards and legal requirements may change, we may update how the Service responds to these signals.

7. How we disclose information

Limited disclosure for operation, direction, and legal needs

We may disclose personal information in the following circumstances:

• At your direction or with your consent. For example, when you publish a résumé, display contact information, download or share content, or connect to a third-party link.
• Service providers. We may use vendors that provide hosting, storage, security, email delivery, error monitoring, analytics, customer support, and other operational services. They may process information only to provide services to us and subject to appropriate contractual restrictions.
• Legal and safety reasons. We may disclose information when we reasonably believe it is required by law, legal process, or governmental request, or necessary to protect rights, safety, security, and the integrity of the Service.
• Business transfers. Information may be disclosed in connection with due diligence, financing, merger, acquisition, reorganization, bankruptcy, or a sale of assets, subject to applicable law and appropriate safeguards.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising.

8. Data retention

We keep information only as long as reasonably needed

We retain account, résumé, and private Job Tracker information while an account is active or as needed to provide the Service. A Free account is active for 30 days. At expiration, its public résumé is unpublished, and the account and associated résumé and Job Tracker content are scheduled for deletion after a seven-day recovery period unless the user upgrades or receives an authorized extension.

Detailed visitor and action records are generally retained for up to 30 days for Free accounts and up to 365 days for Pro accounts. Aggregated résumé counts may remain while the related résumé exists. Former résumé handles may redirect for up to 30 days. Deleting a résumé or account also deletes associated records through the Service's normal deletion process.

Support requests are generally retained for up to 180 days so we can investigate, respond, and recognize related follow-up. They are then scheduled for deletion unless a longer period is reasonably necessary for security, a dispute, enforcement, or legal compliance.

We may retain limited information longer when reasonably necessary for fraud prevention, security, dispute resolution, legal compliance, enforcement, backups, or maintaining an audit record. Retention may vary where law requires a different period.

9. Security

Reasonable safeguards, without impossible promises

We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures include access controls, password hashing, account-verification tools, and security monitoring appropriate to the Service's stage and risks. No internet transmission, storage system, or security measure is completely secure, and we cannot guarantee absolute security.

You are responsible for using a strong, unique password, protecting your sign-in credentials, enabling available security features, and promptly notifying us if you suspect unauthorized access.

10. Your choices and privacy rights

Access, correction, publication, and deletion controls

You can access and correct much of your account and résumé information through the Service. You may publish or unpublish a résumé, control supported public fields, enable or disable search indexing, delete individual résumés, and delete your account.

Depending on where you live, applicable law may give you rights to request access, correction, deletion, portability, restriction, or information about how personal information is processed, and to appeal a decision concerning a request. You may also have a right to opt out of certain sales, sharing, targeted advertising, or profiling. TinyResumes does not currently sell personal information or use it for cross-context behavioral advertising.

Signed-in users can download a portable account copy from Data & privacy in account settings. To exercise a right that is not otherwise available, submit a privacy request through Contact or email [email protected]. We may need to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising an applicable privacy right.

If you disagree with our response, reply with the request reference and ask for another review. Depending on where you live, you may also lodge a complaint with the privacy or data-protection authority available to you.

11. Children's privacy

The Service is not directed to children

TinyResumes is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information in violation of this section, contact us so we can investigate and take appropriate action.

12. International use

Information may be processed in the United States

TinyResumes is operated from the United States. If you access the Service from another country, your information may be transferred to and processed in the United States or other locations where our service providers operate. Those locations may have privacy laws different from those in your country. Where required, we will use appropriate safeguards for international transfers.

13. Changes to this policy

We may update this Privacy Policy

We may revise this policy to reflect changes in the Service, our practices, technology, or law. We will post the revised policy at this URL and update the “Last updated” date. If a change is material, we may provide additional notice through the Service or by email where appropriate. Your continued use of the Service after an updated policy becomes effective is subject to applicable law.

14. Contact us

Privacy questions and requests

For questions about this Privacy Policy or to submit a privacy request, contact:

Before production launch, replace or supplement this contact block with the legal name and mailing address of the entity operating TinyResumes.