Privacy
policy.

§01OverviewP.01

Zevo Works ("we", "us", "our") builds AI-powered productivity tools, including my-resume.in. This Privacy Policy explains what data we collect across our websites and products, why we collect it, and the rights you have over it. We try to keep this human-readable — if anything is unclear, email us (section §11). We are the data controller for the personal data you submit, operate from India, and serve users worldwide.

§02Data we collectP.02

Different Zevo Works surfaces collect different data. The marketing site (zevo-works.in) collects almost nothing. Product-specific collection is enumerated below.

• ▸Anonymous, aggregated traffic stats (pageviews, referrer, country-level region, browser/OS user-agent string).
• ▸No accounts. No cookies tied to your identity.
• ▸If you email us, we keep the message thread for support history.

• ▸Account data: name, email, hashed password (bcrypt). If you sign in with Google, we receive your Google email, name, profile picture URL and a Google ID — never your Google password.
• ▸Profile data: everything you fill in on the Profile Hub — personal details, education, work experience, internships, skills, projects, certifications, languages, achievements and links.
• ▸Résumé artefacts: uploaded PDFs, parsed text, generated LaTeX source, compiled PDFs, build metadata.
• ▸Job descriptions: any JD text you paste in for AI tailoring.
• ▸Usage telemetry: pageviews, route timings, user-agent string, approximate locale, a randomly generated session ID.

§03How we use your dataP.03

We use the data above only to:

• ▸authenticate you and keep your session alive;
• ▸store your profile so you can generate unlimited résumés from it;
• ▸compile résumés, render previews, and let you download PDFs;
• ▸send your job description to our AI provider so it can tailor a résumé to it (see §05);
• ▸diagnose bugs, monitor performance, and improve the product;
• ▸respond to support requests.

We do not use your profile data to train AI models, and we do not run ads.

§04Storage & retentionP.04

Data is stored in our managed database and object storage. Compiled PDFs and uploaded résumés are kept until you delete them or close your account. Account and profile data are kept for as long as your account is active. When you delete your account from Profile Hub → Account, we permanently remove your account, profile, all résumés and JD data within 30 days from primary storage. Encrypted backups are rotated within 90 days.

§05Sharing & third partiesP.05

We share data only with the sub-processors needed to run our products:

• ▸Cloud hosting & database — to store account, profile and résumé data.
• ▸AI provider (e.g. OpenAI / Anthropic / Google AI) — when you tailor a résumé to a JD, the relevant profile fields and the JD text are sent to the model provider for inference. We do not authorise providers to train on this data where that option is available.
• ▸Google OAuth — only if you choose Google sign-in.
• ▸LaTeX compiler — runs in our infrastructure (Docker); your data is not sent to a third party for compilation.
• ▸Legal authorities — only if compelled by valid legal process.

We never sell, rent, or trade your personal data.

§06Cookies & trackingP.06

The marketing site uses no identifying cookies. The my-resume.in product uses a single first-party HTTP-only session cookie to keep you logged in, and minimal first-party usage telemetry (pageviews, route paths). We do not use third-party advertising cookies, fingerprinting, or cross-site trackers anywhere.

§07Your rightsP.07

You can, at any time:

• ▸Access & correct your profile data directly from the Profile Hub.
• ▸Export your generated résumés as PDF.
• ▸Delete individual résumés or job descriptions from the dashboard.
• ▸Delete your entire account from Profile Hub → Account → Delete Account.
• ▸Withdraw consent for AI-tailoring by not pasting a job description.

Under applicable laws (GDPR / India's DPDP Act 2023 / CCPA), you may also have the right to data portability, restriction of processing, and to lodge a complaint with a supervisory authority. Email us to exercise any of these rights.

§08SecurityP.08

Passwords are hashed with bcrypt. Sessions use HTTP-only, signed cookies over HTTPS. We follow least-privilege access on our infrastructure and patch dependencies regularly. No system is perfectly secure; please use a strong, unique password and keep it private.

§09ChildrenP.09

Our products are not directed at children under 16. If you believe a minor has created an account, contact us and we will remove it.

§10ChangesP.10

We may update this policy as our products evolve. Material changes will be highlighted on the home page or via email. The "Updated" date in the metadata sheet above always reflects the current version.

§11ContactP.11

Questions, deletion requests, or anything else — email info@zevo-works.in. We aim to respond within 5 working days.