Workscaler Inc. | Resumás
Effective Date: September 16, 2026
Last Updated: September 16, 2026
Workscaler Inc., doing business as Resumás (“Resumás,” “Workscaler,” “we,” “us,” or “our”), provides the Resumás website, iOS and Android applications, and related resume, job-search, career-support, coaching, and outplacement services (collectively, the “Services”). This Privacy Policy explains what personal information we access, collect, use, disclose, retain, and delete when you use the Services.
This Policy applies to visitors, registered users, subscribers, coaching participants, and other users of the Services. Our California Privacy Policy provides additional disclosures for California residents and should be read together with this Policy.
3.1 Account and Contact Information
We may collect your name, email address, telephone number, username, password or authentication credential, account identifier, profile details, communication preferences, and subscription status. Passwords are stored only in protected form or handled by an authentication provider; we do not store readable passwords.
3.2 Resume and Career Information
We collect information you enter, upload, import, or generate through the Services, including resumes and CVs, employment history, education, skills, certifications, accomplishments, military occupation information, career preferences, desired roles, location preferences, job descriptions, application records, interview materials, cover letters, LinkedIn-related content, and other professional information.
Resumes and related materials may incidentally contain sensitive information that you choose to provide, such as age indicators, citizenship or immigration information, demographic information, disability or accommodation information, military status, or membership information. Do not include Social Security numbers, government identification numbers, financial-account credentials, health records, or other information unnecessary for career services.
3.3 AI Inputs, Outputs, and Inferences
When you use an AI-powered feature, we collect the prompts, instructions, documents, job descriptions, profile information, feedback, and other content you submit to that feature. We also process generated drafts, scores, classifications, recommendations, job-match assessments, Ghost Job Detector results, Do Not Apply Guidance, and other inferences produced from your inputs.
AI outputs may be incomplete or inaccurate. Ghost-job indicators, match scores, and application guidance are decision-support tools, not guarantees or employment decisions. You decide whether to use an output or apply for a position.
3.4 Payments and Subscriptions
If you purchase a subscription or service, we collect transaction details such as the plan, amount, date, subscription status, and transaction identifier. Payment-card information is processed by [PAYMENT PROCESSOR(S)], Apple, or Google, as applicable. We do not store full payment-card numbers.
3.5 Device, Usage, and Diagnostics
We may collect IP address, device and browser type, operating system, app version, language, time zone, device or app identifiers, login events, pages or screens viewed, features used, links selected, session times, referral information, search activity, crash reports, performance data, and security logs. We use this information to operate, troubleshoot, secure, and improve the Services.
We do not use advertising identifiers or device fingerprinting to track you across third-party apps or websites.
3.6 Location Information
We may infer an approximate city or region from your IP address. If a local-jobs feature requests device location, we access precise or approximate location only after explaining the purpose and receiving device-level permission. You may decline or revoke location access and enter a location manually where that option is available.
We do not collect background location unless a feature clearly requires it, we provide a prominent disclosure, and you grant the required permission.
3.7 Communications and Coaching
We collect messages, support requests, survey responses, feedback, and other communications you send to us. If you participate in coaching, interview practice, or another audio/video feature, we will provide notice and request permission before recording or storing audio, video, or a transcript.
3.8 Connected Services
If you choose to connect or sign in through a third-party service, we receive only the information you authorize that service to provide, such as your name, email address, profile identifier, or authorized professional-profile content. We do not store third-party account passwords. You may disconnect an integration in account settings or through the third party; where supported, Resumás will revoke the associated access token.
3.9 Service Providers and Public Sources
We may receive transaction status, fraud signals, email-delivery status, analytics, crash diagnostics, or support information from service providers. We may also process job postings, employer information, and professional information from public or licensed sources where permitted by law.
The app requests device access only when needed for a feature you choose to use. The shipped app and its store disclosures must identify only the permissions actually used.
Permission or access | Why it may be requested | Choice or alternative |
Files or document picker | Select and upload a resume or export a document | Choose specific files; enter information manually where available |
Photos or camera | Import or capture a resume or profile material | Use a file picker or manual entry where available |
Microphone | Participate in audio coaching or interview practice | Decline and use text-based features where available |
Location | Find nearby jobs or set a search area | Enter a city, ZIP code, or region manually where available |
Notifications | Receive job alerts, account notices, or reminders | Disable notifications in app or device settings |
Permission denial does not block unrelated paid functionality. You can change permissions in iOS or Android device settings.
We use personal information to:
Where applicable law requires a legal basis, we rely on performance of a contract, consent, legitimate interests that are not overridden by your rights, compliance with legal obligations, and establishment or defense of legal claims.
6.1 Data Used for AI Features
Depending on the feature, AI processing may use your resume content, profile and career information, selected job description, prompts, application history, location preferences, and the output being generated. Resumás transmits only the fields needed to perform the feature you requested.
6.2 Third-Party AI Providers and Consent
Some AI features may send personal information to the following service providers acting on our behalf:
Provider and product | Data sent | Purpose | Provider use and retention |
OPENAI | RESUME TEXT, JOB DESCRIPTION, PROMPT, AND ACCOUNT-SCOPED IDENTIFIER | Generate or evaluate the output requested by the user | Contractual retention period is 30 days. Provider training status is disabled by default. |
Before personal information is sent to a third-party AI provider for the first time, the app will display a clear notice identifying the provider, the data to be sent, and the purpose, and will ask for your affirmative permission. Declining optional third-party AI processing will not block unrelated non-AI functionality. You can withdraw permission for future AI transfers by contacting us. Withdrawal does not affect processing already completed at your request.
6.3 Model Training
Resumás does not permit a third-party AI provider to use your identifiable account information, resume, career documents, private communications, or prompts to train generalized models on the provider’s own behalf. Resumás does not use those materials to train a generalized Resumás model unless we first give you a separate, specific explanation and obtain opt-in consent.
Service-quality review, abuse detection, and feature evaluation may use access-controlled samples only when legally permitted and consistent with your settings; where practical, information is minimized or deidentified.
6.4 Reporting AI Output
You may report inaccurate, unsafe, offensive, or otherwise inappropriate AI-generated output through the in-app reporting function or at support@resumas.com. Reports may include the relevant prompt and output so that we can investigate and improve safeguards.
7.1 Service Providers
We use service providers to perform services on our behalf. Before publication, this schedule must identify all providers that receive personal information from the website or mobile apps, including embedded SDKs.
Service category | Current provider(s) | Information involved | Purpose |
AI processing | OPENAI | As described in Section 6 | Requested AI features |
Cloud hosting and storage | Amazon AWS | Account, user content, logs, and service data | Host and deliver the Services |
Authentication | Amazon AWS | Account identifiers and authentication events | Sign-in and account security |
Analytics and crash reporting | Amazon AWS | Usage, device, diagnostics, and app identifiers | Performance, reliability, and analytics |
Payments and subscriptions | Stripe, Apple, Google | Transaction, subscription, and limited account information | Process and administer purchases |
Email and push notifications | Amazon AWS | Contact information, push token, message, and delivery data | Service messages and selected alerts |
Customer support | Amazon AWS | Contact information, support content, and relevant account details | Respond to support requests |
Service providers may use information only to perform contracted services for us, must protect it under written obligations, and may not sell it or use it for their own advertising. We require providers that access user data to provide the same or equivalent protection described in this Policy, as applicable to their role.
7.2 User-Directed Disclosures
We disclose information when you direct us to export, share, submit, or connect content to a third party. The recipient’s privacy terms apply after it receives the information.
7.3 Business Transfers
Information may be transferred as part of a merger, financing, acquisition, bankruptcy, reorganization, or sale of all or part of our business. We will provide notice and choices when required by law.
7.4 Legal, Safety, and Security Purposes
We may disclose information when reasonably necessary to comply with law or valid legal process, protect users or others, investigate fraud or abuse, enforce agreements, or establish or defend legal claims.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising and do not use it for targeted advertising based on activity across unaffiliated apps or websites. We do not share resume or career information with employers or recruiters unless you direct us to do so.
If our practices change, we will update this Policy and our Apple App Privacy and Google Play Data safety disclosures and provide required notices, choices, and platform permission prompts before the changed practice begins.
The website and app may use essential local storage, cookies, pixels, SDKs, or similar technologies for authentication, security, preferences, analytics, crash reporting, and performance. Where required, we request consent before activating nonessential analytics or marketing technologies. You can manage website cookies through our consent tool and browser settings and manage app analytics through Settings > Privacy where available.
We honor legally required browser-based opt-out preference signals where applicable. We do not interpret a general “Do Not Track” signal as a universal consent withdrawal where no legal standard requires it.
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, subject to legal, accounting, fraud-prevention, security, and dispute-resolution requirements.
Data category | Standard retention |
Account profile, resumes, career content, saved jobs, application records, AI inputs and outputs | While the account is active; deleted or deidentified within [30] days after a verified deletion request unless a narrow legal exception applies |
Third-party AI request content | Provider-specific period disclosed in Section 6; configured for the shortest practical retention and no provider training |
Transaction and tax records | Up to 7 years, or longer if legally required; retained records are restricted to compliance purposes |
Support communications | Up to 3 years after the matter closes unless needed longer for a legal or security matter |
Security, access, and fraud logs | Normally up to 12 months; longer only for an active investigation, legal requirement, or security defense |
Analytics and crash data | Normally 90 days to 12 months, depending on the system and whether the data is aggregated |
Marketing contact data | Until you unsubscribe or the relationship ends; a minimal suppression record may be retained to honor the opt-out |
Backups | Removed through scheduled rotation within [90] days after deletion from active systems unless technically isolated and retained longer solely for disaster recovery |
Deidentified or aggregated data | May be retained as long as it cannot reasonably be reidentified |
When an account is deleted, we delete the account and associated user content from active systems; account deactivation is not a substitute. If we retain limited records for tax, fraud prevention, security, legal compliance, or legal claims, we isolate them, limit their use to that purpose, and delete them when the applicable period ends.
All registered users may initiate deletion regardless of location.
We may use proportionate steps to verify that the requester controls the account. We will confirm receipt, explain any expected completion time, and notify you when deletion is complete. We will not require a telephone call or unrelated support interaction merely to submit a deletion request.
Deleting a Resumás account does not automatically cancel a subscription billed by Apple or Google. Before deletion, review and manage an Apple subscription through your Apple account or a Google Play subscription through Google Play. Deleting an account does not automatically entitle you to a refund; refund rights depend on the applicable store terms and law.
Subject to applicable law, you may request access to, correction of, portability of, or deletion of personal information and may object to or restrict certain processing. You may also withdraw consent for future processing where consent is the basis used. We do not discriminate against you for exercising a privacy right.
Available controls include:
To exercise a right, visit https://resumas.com/privacy-request or contact support@resumas.com. We may verify your identity and authority before acting. An authorized agent may submit a request where permitted by law. If we deny a request, we will explain the reason and any appeal right required by law.
California residents have additional rights described in our California Privacy Policy, including rights to know, delete, and correct personal information and, where applicable, to limit use of sensitive personal information. Because we do not sell or share personal information for cross-context behavioral advertising, there is currently no sale or sharing from which to opt out.
We use administrative, technical, and organizational safeguards designed to protect personal information. These include encrypted transmission using HTTPS/TLS, access controls based on job responsibilities, authentication safeguards, logging and monitoring, vendor review, employee confidentiality obligations, incident-response procedures, and secure deletion processes.
No service can guarantee absolute security. Protect your password, use unique credentials, and contact us promptly if you suspect unauthorized account activity.
The Services are intended for people age 16 or older and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn that we collected such information, we will delete it and close the related account. A parent or guardian may contact support@resumas.com regarding a child’s information.
Resumás operates from the United States. If you use the Services from another country, information may be transferred to and processed in the United States and other countries where our service providers operate. Where required, we use appropriate transfer safeguards and provide the rights required by applicable law.
The Services may link to job boards, employer sites, professional networks, app stores, and other third-party services. Their privacy practices apply when you interact with them. A link or job listing does not mean that Resumás controls or endorses the third party.
We may update this Policy to reflect changes in our Services, technology, providers, or legal obligations. We will change the “Last Updated” date and provide additional notice when required. If a change materially expands how we use or disclose personal information, we will provide notice and obtain consent where required before applying the change.
Resumás / Workscaler Inc.
Attn: Privacy Team
717 K Street
Sacramento, CA 95814
Email: support@resumas.com
Privacy request form: https://resumas.com/privacy-request/
Account deletion page: https://resumas.com/delete-your-resumas-account/
