Return to Legal Hub

Privacy Policy

This Privacy Policy explains how CopilotResume (operated by ETLDataCompany B.V., KVK 87585413) collects, uses, and protects your personal information.

Effective Date: October 8, 2026

Information We Collect

1. Account Information

  • Name and email address (from your OAuth provider when you sign in)
  • Payment information for premium plans — handled directly by Stripe; we never see or store your card details

2. Content You Create

  • Resume and cover letter text, sections, and templates you choose
  • Any files you upload (for example a PDF resume you import)
  • Job descriptions you paste into the ATS Checker or Tailor feature

3. Technical Data (security & operations)

  • IP address, browser type, and request timestamps — kept in server logs for abuse prevention, debugging, and security; not used for analytics or profiling
  • Authentication tokens kept in your browser to keep you signed in

How We Use Your Data

  • Provide and operate the resume builder, cover letter generator, ATS checker, and AI features you use
  • Process payments and manage your subscription via Stripe
  • Send transactional emails (account verification, password reset, billing receipts)
  • Protect the service against abuse and respond to security incidents
  • Comply with our legal obligations (e.g. tax records, BTW reporting)

We do not sell your data. We do not share it with advertisers. We do not build behavioural profiles.

AI Processing & Third-Party AI Providers

Several features (resume import, ATS Check, Verdict, Darpan, Fix with AI, AI Coach, cover-letter generation, grammar and keyword tools) work by sending your text to an AI provider for processing — only when you use that feature.

What is sent to the AI provider

  • The resume or cover letter text you are working on for that specific feature
  • The job description you pasted (only for ATS Check, Verdict and Fix with AI)
  • The specific text snippet you are editing (only for grammar or suggestion tools)

What is NOT sent

  • Your password, payment information, or account details
  • Your resume photo
  • Other resumes, cover letters, or drafts you have saved but are not actively using
  • Your content is not used to train or improve any AI model — all of our AI providers contractually exclude API inputs from training data

Which providers we use

  • Azure OpenAI Service (Microsoft) — our Azure account is in West Europe (Netherlands). Used for ATS Check, Verdict, AI Coach, cover letters, grammar and keyword tools. We use Microsoft’s global deployments, so Microsoft may process a request in any of its data centres, including outside the EU; nothing is stored there.
  • Azure AI Content Understanding and Azure AI Document Intelligence (Microsoft) — our Azure account is in West Europe (Netherlands). Used to read the PDF / DOCX resume you upload when you import it.
  • Claude by Anthropic (Anthropic PBC, United States) — used for two features only: Darpan and Fix with AI. This processing takes place outside the EU, mainly in the United States.

Claude (Anthropic): what it receives

  • Darpan: your resume with your contact details removed — name, email, phone, links and photo are not sent — plus the location you want to work in.
  • Fix with AI: your full resume (including the name and contact details written on it, but not your photo), the job description, and the ATS report, so the rewritten copy is complete.
  • Anthropic processes this data only to answer the request, does not use it to train its models, and is bound by its data processing terms, including the EU Standard Contractual Clauses for transfers outside the EU.

Your account, resumes and reports are stored in the EU (Netherlands). The AI features send text to Microsoft Azure (which may process it outside the EU) and, for Darpan and Fix with AI only, to Claude by Anthropic in the United States.

Data Protection

  • Data is stored in Azure data centres in the European Union (Netherlands region).
  • Payment information is handled by Stripe — a PCI-DSS Level 1 certified processor. We do not see or store full card numbers.
  • Connections use TLS 1.2+ encryption. Database, blob storage, and queue access use Azure Managed Identity (no static keys).
  • We follow standard industry practices to protect your data from unauthorised access, loss, or misuse.

Your Rights Under GDPR / AVG

You have the right to:

  • Access the personal information we hold about you
  • Correct or update inaccurate data
  • Delete your account and associated data (subject to legal retention obligations)
  • Export your data in a portable format
  • Object to processing or withdraw consent at any time
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise any of these rights, email support@copilotresume.io. We respond within 30 days as required by GDPR art. 12.

What We Don't Do

  • No Google Analytics and no Facebook Pixel. Our site analytics (Plausible) sets no cookies and collects no personal data.
  • No selling or sharing of personal data with third parties for marketing
  • No behavioural profiling or targeted advertising
  • No use of your resume content to train AI models — for us or any third party