ZenResume Privacy Policy

At ZenResume, accessible from https://www.zenresume.online, our core engineering philosophy is privacy-first and local-first. This Privacy Policy provides a transparent, legally binding disclosure of how data is handled on our platform, our ephemeral AI processing architecture, and our compliance with Google AdSense, GDPR, and CCPA/CPRA frameworks.

1. Local-First Client Storage & Data Ownership

Unlike legacy resume builders that require account sign-ups and harvest user employment histories into centralized cloud databases, ZenResume operates as a Local-First Web Application:

• Client-Side Storage: Your resume text, contact information, work history, and custom styling parameters are stored locally inside your browser's private storage (IndexedDB & localStorage).
• Zero Remote Databases: We do not operate remote databases that persist, catalogue, or store your resume profile.
• Portable Data Backup (.zenresume / JSON): You have complete, unencumbered ownership of your data. You can export a downloadable, portable backup file (.zenresume or .json) and restore your resume anytime on any device with zero vendor lock-in.

2. Ephemeral AI Processing Disclosures (Gemini Edge Gateway)

When you optionally choose to utilize our AI-assisted features (such as Magic Resume Import or Job Description Bullet Tailoring):

• Ephemeral Transmission: The specific text or document fragment needed to fulfill your request is transmitted securely via HTTPS to our serverless edge proxy (powered by Google Gemini 2.5 API).
• No Server Persistence: The transmitted data is processed in-memory solely to generate the requested text or parsed JSON structure and returned directly to your browser. ZenResume servers do not save or log your resume content.
• Local-Only Mode: All AI features are 100% optional. Users who prefer strictly air-gapped, local-only editing can build, customize, and export vector PDFs entirely offline without triggering any AI network requests.

3. Cookies & Advertising Disclosures (Google AdSense Compliance)

To maintain ZenResume as a free service without mandatory paywalls, we partner with third-party advertising networks, including Google AdSense. In compliance with Google publisher requirements:

• Third-Party Advertising: Third-party vendors, including Google, use cookies to serve ads based on prior visits to our website or other websites across the Internet.
• Personalized Advertising: Google's use of advertising cookies enables it and its partners to serve ads based on your visits to ZenResume and other sites on the Internet.
• Opt-Out Mechanisms: Users may opt out of personalized advertising at any time by visiting Google Ads Settings or through the Digital Advertising Alliance at www.aboutads.info.

4. Telemetry & Anonymous Performance Metrics

We employ lightweight, privacy-preserving telemetry (such as Google Analytics 4 and Vercel Speed Insights) to monitor aggregated system performance, page load velocities, and error rates. This telemetry does not track or collect personal resume content.

5. GDPR, CCPA/CPRA & Global Privacy Rights

Regardless of your jurisdiction (including the European Economic Area, United Kingdom, and California), ZenResume honors all foundational data privacy principles:

• Right to Erase / Delete: Because your data resides exclusively in your browser storage, clearing your browser cache or clicking "Reset Defaults" instantly and permanently purges all local data.
• Right to Portability: You can download a complete structured JSON/.zenresume file of your entire profile with one click.
• Zero Sale of Data: We do not sell, rent, trade, or monetize your personal employment records or contact information to any third party.

6. Digital Personal Data Protection Act, 2023 (DPDP Act 2023) Compliance

In accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act 2023) enacted by the Parliament of India, ZenResume ensures complete statutory protection for Indian Data Principals:

• Notice & Purpose Limitation (Sections 5 & 6): Personal data (contact information and work history entered by the user) is processed exclusively for the specified purpose of compiling the user's resume PDF inside their browser. No secondary processing, cross-site profiling, or unconsented database storage is performed.
• Right to Access & Summary (Section 11): Users can review and extract their complete personal data at any time via the 1-click JSON backup export tool.
• Right to Correction & Erasure ("Right to be Forgotten", Section 12): Users retain autonomous control to edit, correct, or permanently erase all personal resume records directly within their browser storage by clicking "Reset Defaults" or clearing local cache.
• Right of Grievance Redressal (Section 13): Data Principals have the right to register privacy inquiries or grievances with our designated Grievance Officer, with guaranteed statutory resolution timelines.
• Right to Nominate (Section 14): In the event of death or incapacity, a Data Principal may nominate an individual to exercise their data rights by contacting our legal desk.

7. IT Act, 2000 & IT Intermediary Guidelines (Rules 2021 / 2023)

In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:

• SPDI Rules, 2011: ZenResume strictly complies with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 by maintaining encrypted TLS 1.3 transmissions and local-first memory isolation.
• Prohibited Content (Rule 3(1)(b)): Users are strictly prohibited from utilizing the platform to generate, store, or transmit any defamatory, obscene, infringing, or harmful material.

8. CERT-In Cyber Security Directions (2022) & Security Desk

In adherence to the Indian Computer Emergency Response Team (CERT-In) Cyber Security Directions:

• Coordinated Vulnerability Disclosure: Security researchers and users may report potential vulnerabilities to our security desk at aneevarpsolutions@gmail.com.
• IST Timestamping: All operational telemetry, contact ticket dispatches, and audit logs are synchronized to Indian Standard Time (IST / UTC+05:30).

9. Corporate Governance, Grievance Redressal & MCA Disclosures

ZenResume is developed, owned, and operated by Aneevarp Solutions, a recognized enterprise registered under the Ministry of Micro, Small and Medium Enterprises (MSME), Government of India: