Privacy notice
Last updated: [DATE]
1. Who we are (data controller)
[Company legal name], [address], [tax / MERSİS number]. Contact: [privacy email].
2. What we collect
Account data: email address, name (optional), sign-in method, and where you came from when you signed up (the referring website or campaign name, for example “google.com”; no cookie is used for this). Purchases: plan, price, country and any discount code, as reported by our payment provider Gumroad. Your card details stay with Gumroad. Download counts per template (which designs are downloaded most), without your name or resume content. Resume content you enter, stored so you can edit and download it. Usage data, only if you allow analytics: pages viewed and actions taken in the product (for example “resume created”), device type and a random session ID. Usage data never includes the text of your resume.
3. Why we collect it (purpose and legal basis)
To provide the service you asked for (contract). To improve the product, only with your consent (analytics). To send tips and product news, only with your separate consent (marketing). [Add the KVKK Article 5/6 basis for each purpose.]
4. Where it is stored and who processes it
Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Google Analytics), [region]. Google Gemini API (paid tier), only when you upload a resume to be read or use an AI feature: the text of that file or section is sent once to be processed and is not stored by us. Under Google’s paid-tier terms it is not used to train their models. For AI rewrites and report suggestions we send only the resume content, not your name or contact details. Gumroad, for payments. We never see your card details. [List any other processors.] Data may be transferred abroad: [state the KVKK Article 9 basis].
5. How long we keep it
Guest resumes: deleted after [30] days without activity. Account data and resumes: until you delete your account. Usage events: [400] days.
6. Your rights
You can download all your data and delete your account at any time from Account settings. Under KVKK Article 11 you may also [list rights] by writing to [privacy email].
7. Cookies and local storage
Necessary: keeping you signed in and remembering your choices. Analytics (optional): measuring product usage. You can change this at any time in Account settings or the cookie banner.