Privacy Policy

Account information. If you create an account, we store your email address and authentication credentials (handled by our authentication provider; we never see your password).

X handles you submit. The X account handles you enter or purchase a Résumé for, and the resulting generated Résumés.

X activity data. Public (or otherwise authorized) activity of analyzed accounts — such as posts, replies, reposts and their timestamps — retrieved through the X API to generate Résumés.

Purchase identifiers. Order records linking your account to a purchase, including Stripe checkout and payment identifiers. Card numbers are entered directly with Stripe; we never see or store them.

Usage and operational data. First-party analytics events (such as page views) tied to a random visitor identifier stored in your browser. We do not store raw IP addresses; where we need to limit abuse, we use one-way hashed values instead. We also keep operational logs used to run and secure the service.

Feedback. Anything you send us through the feedback form or by email.

To provide the service (generate and deliver Résumés, process purchases, grant access), to understand aggregate usage, to prevent abuse, and to respond to support requests. We do not sell personal information, and we do not use third-party advertising or cross-site tracking.

We use essential browser storage only: your sign-in session, a random visitor identifier for first-party analytics, and small items that remember your place (for example, access to an order you purchased). No advertising cookies or third-party trackers.

We rely on: Stripe (payment processing), the X API (source data for analyses), our cloud hosting and database provider, and an email delivery provider for account and support email. Each processes data only as needed to provide its service to us.

How long we keep data today. X activity we have retrieved and the Résumés generated from it are not currently deleted on an automatic schedule. Account records, purchase and payment records, and first-party analytics records also do not currently have a general automatic deletion schedule.

Access and deletion requests. You can view your purchases and Résumés in your account. To request a copy of your personal information, or to ask us to delete your account and associated personal data, email support@x-ume.com. Deletion requests are currently reviewed and carried out manually; there is no self-service deletion tool yet.

We may need to keep some records where required for legal, security, fraud-prevention, accounting or dispute-resolution purposes, so not every request can always be fulfilled in full. Where that applies, we will tell you what we are keeping and why, and we will delete information when the law requires us to.

Access to customer data is restricted, payment pages are served by Stripe, and administrative functions are limited to the site owner. No method of transmission or storage is perfectly secure, but we design the service to collect little and protect what we hold.

Privacy questions and requests: support@x-ume.com.