Privacy Policy
This Privacy Policy explains how CopilotResume (operated by ETLDataCompany B.V., KVK 87585413) collects, uses, and protects your personal information.
Effective Date: May 01, 2026
Information We Collect
1. Account Information
- Name and email address (from your OAuth provider when you sign in)
- Payment information for premium plans — handled directly by Stripe; we never see or store your card details
2. Content You Create
- Resume and cover letter text, sections, and templates you choose
- Any files you upload (for example a PDF resume you import)
- Job descriptions you paste into the ATS Checker or Tailor feature
3. Technical Data (security & operations)
- IP address, browser type, and request timestamps — kept in server logs for abuse prevention, debugging, and security; not used for analytics or profiling
- Authentication tokens kept in your browser to keep you signed in
How We Use Your Data
- Provide and operate the resume builder, cover letter generator, ATS checker, and AI features you use
- Process payments and manage your subscription via Stripe
- Send transactional emails (account verification, password reset, billing receipts)
- Protect the service against abuse and respond to security incidents
- Comply with our legal obligations (e.g. tax records, BTW reporting)
We do not sell your data. We do not share it with advertisers. We do not build behavioural profiles.
AI Processing & Third-Party AI Providers
Several features (resume import, ATS scoring, resume tailoring, cover-letter generation, grammar and keyword tools) work by sending your text to a large-language-model (LLM) provider for processing.
What is sent to the AI provider
- The resume or cover letter text you are working on for that specific feature
- The job description you pasted (only for ATS Checker / Tailor)
- The specific text snippet you are editing (only for grammar or suggestion tools)
What is NOT sent
- Your name, email, password, or payment information
- Other resumes, cover letters, or drafts you have saved but are not actively using
- Your content is not used to train or improve any AI model — both providers contractually exclude API inputs from training data
Which providers we use
- Azure OpenAI Service (Microsoft) — hosted in the European Union (West Europe / Netherlands). Used for all AI generation across free, premium, and business plans. Your data stays in the EU.
- Azure AI Document Intelligence (Microsoft) — hosted in the European Union (West Europe / Netherlands). Used to read uploaded PDF / DOCX resumes during import. Your data stays in the EU.
All AI processing happens on Microsoft Azure services within the European Union — your content does not leave the EU.
Data Protection
- Data is stored in Azure data centres in the European Union (Netherlands region).
- Payment information is handled by Stripe — a PCI-DSS Level 1 certified processor. We do not see or store full card numbers.
- Connections use TLS 1.2+ encryption. Database, blob storage, and queue access use Azure Managed Identity (no static keys).
- We follow standard industry practices to protect your data from unauthorised access, loss, or misuse.
Your Rights Under GDPR / AVG
You have the right to:
- Access the personal information we hold about you
- Correct or update inaccurate data
- Delete your account and associated data (subject to legal retention obligations)
- Export your data in a portable format
- Object to processing or withdraw consent at any time
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise any of these rights, email support@copilotresume.io. We respond within 30 days as required by GDPR art. 12.
What We Don't Do
- No analytics, no tracking pixels, no advertising cookies — we do not use Google Analytics, Facebook Pixel, or similar tools
- No selling or sharing of personal data with third parties for marketing
- No behavioural profiling or targeted advertising
- No use of your resume content to train AI models — for us or any third party