Privacy Policy

1. Introduction

Sunshine Tech Solutions LLC ("we", "us", "our", or "Company") operates devresumes.com ("the Service", "our Service", or "the Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume builder and optimization platform.

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the data practices described in this policy, you should not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account or use our Service, we collect the following information:

• Account Information: Email address, password (stored in encrypted form), first name, and last name
• Resume Content: All information you include in your resumes, including personal information, work experience, education, skills, projects, and certifications
• Job Descriptions: Job descriptions you provide when using our resume tailoring features
• Payment Information: When you subscribe to a paid plan, payment information is processed by Stripe. We do not store full credit card numbers or payment card details on our servers

2.2 Information from Third-Party Services

If you choose to connect third-party accounts, we may collect:

• GitHub Integration: GitHub username, GitHub access token (stored securely), repository information, project descriptions, and code metadata when you import projects
• Google OAuth: Google account ID and basic profile information if you sign in with Google
• OAuth Provider Data: Basic profile information from authentication providers you use to sign in

2.3 Automatically Collected Information

When you use our Service, we automatically collect certain information:

• Usage Data: Information about how you interact with the Service, including features used, pages visited, and time spent
• AI Usage Tracking: Types of AI features used, token consumption, and associated costs for service improvement and quota management
• Resume Analytics: Events such as resume views, downloads, shares, and ATS score checks
• Device Information: Browser type, operating system, IP address, and device identifiers
• Log Data: Server logs including timestamps, request types, and error messages

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authenticate your account
• Remember your preferences and settings
• Analyze Service usage and improve functionality
• Provide personalized content and features

You can control cookie preferences through your browser settings, though disabling cookies may limit Service functionality.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our resume building and optimization services
• AI Processing: To process your resume content through AI models for optimization, scoring, and tailoring features
• Account Management: To create and manage your account, process subscriptions, and handle customer support
• Payment Processing: To process payments, manage subscriptions, and prevent fraud (handled by Stripe)
• Communication: To send you service-related notifications, updates, and respond to your inquiries
• Service Improvement: To analyze usage patterns, improve AI models, and enhance Service features
• Security: To detect, prevent, and address security issues and unauthorized access
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist in operating our Service:

• OpenAI: Your resume content and job descriptions are sent to OpenAI's API for AI processing. OpenAI's use of data is governed by their privacy policy and data processing terms
• Stripe: Payment information is shared with Stripe for payment processing. Stripe's privacy policy governs their handling of payment data
• GitHub: When you connect your GitHub account, we access your repositories through GitHub's API according to GitHub's terms
• Google: When you sign in with Google, authentication is handled by Google according to Google's privacy policy
• Hosting Providers: Our Service is hosted on cloud infrastructure providers who may have access to data as necessary for service provision

4.2 Public Resumes

If you choose to make a resume public, the resume content (but not your account information) will be accessible to anyone with the resume's unique URL. You control this setting for each resume.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal processes or government requests
• Enforce our Terms of Service
• Protect the rights, property, or safety of our users, ourselves, or others
• Prevent fraud or security issues

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

5. Data Security

We implement reasonable technical and organizational security measures to protect your information:

• Encryption: Passwords are hashed using bcrypt. Data in transit is encrypted using TLS/SSL
• Access Controls: Access to personal data is restricted to authorized personnel who need it for their job functions
• Secure Storage: Data is stored in secure databases with access controls and regular security audits
• Authentication: We use JWT tokens for secure authentication
• Regular Updates: We regularly update our systems and dependencies to address security vulnerabilities

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active and for a reasonable period after account deletion to comply with legal obligations
• Resume Data: Retained until you delete your resume or account, unless required by law to retain longer
• Payment Records: Retained as required by law for accounting and tax purposes (typically 7 years)
• Usage Analytics: Aggregated and anonymized data may be retained indefinitely for service improvement

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it by law or for legitimate business purposes.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can access and download your resume data and account information through the Service
• Correction: You can update your account information and resume content at any time
• Deletion: You can delete your resumes or entire account at any time through the Service
• Data Portability: You can export your resume data in PDF or JSON format
• Opt-Out: You can disconnect third-party integrations (GitHub, Google) at any time
• Cookie Preferences: You can manage cookie preferences through your browser settings

To exercise these rights, please contact us at devresumes.com@gmail.com or use the account management features in the Service.

8. Children's Privacy

Our Service is not intended for individuals under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries.

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities
• Compliance with applicable data protection laws
• Security measures to protect data during transfer

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt out of the sale of personal information (we do not sell personal information)
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us at devresumes.com@gmail.com.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request a copy of your personal data
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: You can request limitation of how we process your data
• Right to Data Portability: You can request transfer of your data to another service
• Right to Object: You can object to processing of your data for certain purposes
• Right to Withdraw Consent: You can withdraw consent for data processing at any time

To exercise these rights, please contact us at devresumes.com@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

12. Third-Party Services

Our Service integrates with third-party services. Their privacy practices are governed by their own privacy policies:

• OpenAI: https://openai.com/privacy - Processes resume content for AI features
• Stripe: https://stripe.com/privacy - Processes payments
• GitHub: GitHub Privacy Statement - Provides repository access for importing projects
• Google: https://policies.google.com/privacy - Provides OAuth authentication

We encourage you to review the privacy policies of these third-party services to understand how they handle your information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes (if you have provided an email address)
• Displaying a notice in the Service for substantial changes

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the Service and delete your account.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.