Compliance & Data Protection

Privacy Policy

Last Updated: June 16, 2026 | Compliant with UU PDP (No. 27/2022) & GDPR

Commitment to Ephemeral Processing 🛡️

ResuMate AI is a validation project built for the "Data Driven Entrepreneurship" curriculum. We understand that resumes contain sensitive Personal Identifiable Information (PII). We operate on a strict ephemeral processing principle—we do not permanently save, store, or sell your resumes or any personal data.

1Personal Data We Process

We collect and process the minimal amount of data required to provide the ATS resume matching service:

  • Resume Content: Any text parsed from the PDF document you upload.
  • Job Description: The text you paste in the target description input box.
  • Analytics Data: Standard usage telemetry, page interactions, and screen sizes collected via privacy-compliant website analytics and performance telemetry platforms.

2Third-Party Sub-processor: Secure AI Cloud API

To perform ATS scanning, text extraction is sent to secure third-party AI cloud processing providers (USA). We wish to disclose the following details regarding this transmission to maintain absolute transparency under UU PDP and GDPR requirements:

💡 Zero Model Training: Under our provider's commercial API Data Privacy Policy, data submitted via their secure endpoints is never used to train, test, or improve AI models (unlike generic, consumer chat-based AI interfaces).

⚠️ 30-Day Abuse Logging: The AI provider retains API requests and response logs on their secure platform for up to 30 days solely to monitor for abuse, harassment, or malicious usage. After this period, the logs are permanently deleted automatically.

By utilizing the scan feature on our platform, you provide your explicit consent to have your resume content processed ephemerally through the cloud AI API under these safety guidelines.

3Website Analytics & Cookie Control

We use privacy-compliant website analytics platforms to track high-level events (such as whether scans are completed or buttons are clicked) to validate our business metrics.

  • Prior Consent (Opt-in): Analytical cookies are disabled by default. Analytics will only load and assign a tracking client ID if you explicitly consent via our Cookie Banner.
  • Revocation: You can clear your browser cookies or local storage at any time to reset your consent preferences.

4Your Rights (GDPR & UU PDP Compliance)

Under Indonesia's UU Pelindungan Data Pribadi (UU PDP No. 27/2022) and the GDPR, you have rights regarding your personal data:

  • Hak Atas Informasi / Right to be Informed: Knowing what data is processed (provided in this policy).
  • Hak Menghapus Data / Right to Erasure: Since we do not store your resumes on our servers, there is no permanent copy of your resume to delete.
  • Withdraw Consent: You may choose not to use the service if you do not agree to the ephemeral processing by our cloud AI API.

For any questions regarding your data privacy, you can reach out to our team via our Contact Form.