Privacy Policy

Last updated: 9 September 2026

This Privacy Policy explains how VietResume (“VietResume”, “we”, “us”) collects, uses, stores, and shares information when you use vietresume.com and its resume, CV optimisation, and job-application features.

By using VietResume, you can create and improve a CV, evaluate it, and manage job applications. You control whether to connect Google and whether to send an application email. We do not read your Gmail mailbox.

Information we collect

• Account information: when you sign in with Google, we receive your Google account identifier, name, email address, and profile image.
• CV and career information: CV files, extracted CV text, education, work history, skills, job descriptions, and the content you enter or generate in VietResume.
• Job-application information: the job selected, recipient email address, application email subject and content, application status, and the message identifier returned after an email is sent.
• Google connection information: the Gmail address, Google OAuth permissions you grant, and an encrypted refresh token required to keep the Gmail sending connection active.
• Payment information: transaction and order identifiers, amount, status, and timestamps for paid features. Card details are processed by Stripe and are not stored by VietResume.
• Technical information: our hosting and security providers may process standard server-log information, such as IP address, browser or device details, request time, and security events, to operate and protect the service.

How we use your information

We use information only as needed to provide and improve the user-facing VietResume features, including to:

• create and secure your account and maintain your session;
• store, display, analyse, score, rewrite, and generate content from the CV and job information you provide;
• create an application email from your CV when you request it;
• send an application email and its CV attachment through your connected Gmail account only after you choose to send it;
• record your application history, manage usage limits and purchases, prevent abuse, and provide support.

Google user data and Gmail permission

VietResume requests the Google OpenID, email, profile, and gmail.send scopes. The gmail.send scope is used solely to send a job-application email that you initiate from VietResume. We do not request permission to read, search, modify, or delete messages in your Gmail mailbox.

We store the Gmail address and the minimum connection credentials needed to send emails you request. The long-lived Gmail refresh token is encrypted before it is stored. We use it only to obtain a short-lived access token for sending your requested email from your connected account. You can revoke VietResume’s Google access at any time in your Google Account permissions.

VietResume’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or allow it to be used for advertising profiles. We do not transfer Google user data to third parties except as necessary to provide the user-facing features above, comply with law, or protect the security of the service.

AI processing

When you use an AI feature, the CV text, job description, or instructions relevant to that feature may be sent to AI service providers such as OpenAI or Groq for processing. We use those providers to return the result you request, such as CV analysis, a rewrite, a score, or an application-email draft. Do not include information that you do not want processed for that purpose.

How we share information

We share information only with the following categories of recipients when necessary:

• Service providers: Cloudflare for application hosting, database, and file storage; Stripe for payments; Google for sign-in and user-requested Gmail sending; and AI providers for user-requested AI features.
• Recruiters or employers: the recipient you select or whose application email is listed in a job posting, when you explicitly send an application email. The email may include your CV attachment and the content you approve.
• Legal and security recipients: when required by applicable law or when reasonably necessary to protect the rights, safety, and security of VietResume, our users, or others.

We do not sell personal information.

Storage, retention, and your choices

We keep account, CV, application, and purchase records for as long as reasonably needed to provide VietResume and meet legal, accounting, fraud-prevention, or security obligations. Replacing an application CV removes the prior stored application-CV file. You may ask us to access, correct, export, or delete your personal information by emailing [email protected] from the email address associated with your account. We may retain information where required or permitted by law.

Security

We use reasonable technical and organisational safeguards designed to protect information in our control, including access controls and encryption for stored Gmail refresh tokens. No online service can guarantee absolute security; please keep your Google account and devices secure.

Children’s privacy

VietResume is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so that we can investigate and take appropriate action.

Changes and contact

We may update this policy when our practices or the law changes. The updated version will be posted on this page with a new “Last updated” date. For privacy questions or requests, contact [email protected].