ResuLoom AI

Privacy Policy

Effective Date: September 28, 2026

This Privacy Policy explains how ResuLoom AI ("ResuLoom", "we", "us") collects, uses, stores, and protects personal data. ResuLoom is operated by SOTO AI, a software company associated with citizens of Ecuador and Argentina. We design this service to comply with the EU/EEA General Data Protection Regulation (GDPR), Ecuador’s Organic Law on Personal Data Protection (LOPDP), and Argentina’s Personal Data Protection Law No. 25.326, to the extent each applies.

1. Data controller

The controller of personal data processed through ResuLoom is SOTO AI / ResuLoom AI. Contact for privacy requests: [email protected]. Website: https://resuloom.com · Operator site: https://sto.ec.

2. Legal frameworks we follow

Depending on where you are located and how the service is offered, the following frameworks may apply:

  • GDPR (EU/EEA and similar regimes) — lawful bases, transparency, and data-subject rights including access, rectification, erasure, restriction, portability, and objection.
  • Ecuador — Ley Orgánica de Protección de Datos Personales (LOPDP): principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity/confidentiality, and rights of access, rectification, deletion, opposition, and portability.
  • Argentina — Law No. 25.326 (and related regulations administered by the AAIP): informed consent where required, purpose limitation, confidentiality, and ARCO rights (Access, Rectification, Cancellation/Deletion, Opposition).

3. Information we collect

ResuLoom does not require an account. We may process the following categories of data when you use the service:

  • Resume / cover letter content you enter (for example name, contact details, work history, education, skills). This can include personal data you choose to provide.
  • Job descriptions or LinkedIn profile data you paste or authorize for import, used only to generate or tailor content you request.
  • Optional encrypted resume payloads and share identifiers if you choose to save or share online.
  • Technical data needed to operate the site (for example language preference cookie, security logs, approximate device/browser metadata).
  • Cookieless page views on our server (Umami) for resuloom.com. Google Analytics only if you consent: pages viewed, approximate location derived by Google, device/browser type, and similar usage metrics. We enable IP anonymization where supported.
  • If you connect LinkedIn, profile and email fields returned by LinkedIn’s API for the import you requested.

4. Legal bases for processing

We process personal data on these bases:

  • Contract / service performance — to generate, edit, export, save, or share resumes/cover letters you request.
  • Consent — for optional analytics cookies and any processing that requires prior opt-in under applicable law. You may withdraw consent at any time via Cookie settings.
  • Legitimate interests — securing the service, preventing abuse, and improving reliability, balanced against your rights.
  • Legal obligation — where we must retain or disclose information to comply with law.

5. How we use your data

We use personal data only for:

  • Providing AI-assisted resume and cover letter features you initiate.
  • Optional encrypted cloud save and public share links you create.
  • Language and essential site preferences.
  • Optional product analytics (only with consent).
  • Responding to privacy or support requests sent to [email protected].

6. AI and subprocessors

When you use AI features, relevant text you submit is sent to our AI provider (currently OpenAI) to generate or improve content. That processing is necessary to provide the feature you requested. Providers may process data in the United States or other countries. We do not sell your resume content. Google Analytics (if consented) is also a third-party processor for usage metrics.

7. Local storage and encrypted cloud storage

By default, resume/cover letter drafts stay in your browser (localStorage). If you choose online save, content is encrypted on your device before upload and stored in a database hosted in the United States.

We aim not to keep plaintext resume bodies on our servers for optional saves—only encrypted payloads and identifiers needed to retrieve them. Keep your share/resume IDs confidential.

8. Cookies and analytics

Essential cookies (such as language) are used to run the site. A cookieless Umami counter on our server records visits to resuloom.com without a cookie. Analytics cookies load only after you opt in through our cookie banner or Cookie settings.

We do not use advertising, retargeting, or cross-site marketing pixels. Declining analytics does not block core resume features.

Details are in our Cookie Policy. Google’s processing is also described in Google’s Privacy & Terms.

9. Sharing and disclosure

We do not sell personal data. We share data only with processors needed to run the service (hosting, AI generation, optional analytics), when you publish a share link, or when required by law.

10. International transfers

SOTO AI is linked to Ecuador and Argentina; infrastructure and subprocessors (for example U.S. hosting, OpenAI, Google) may process data outside your country. Where required, transfers rely on appropriate safeguards and/or your consent for the feature you use (including optional analytics).

11. Retention

Browser local data remains until you clear it. Encrypted cloud resumes remain while the service operates or until you request deletion. Umami page-view records stay on our server. Google Analytics retention follows its settings and your consent withdrawal. Support emails are kept only as long as needed to resolve your request.

12. Your rights

Subject to applicable law (GDPR, Ecuador LOPDP, Argentina Law 25.326), you may request:

  • Access to personal data we hold about you.
  • Rectification of inaccurate data.
  • Erasure / cancellation / deletion when legally applicable.
  • Restriction of processing or opposition/objection to certain processing.
  • Portability of data you provided, where applicable.
  • Withdrawal of consent (including analytics) without affecting prior lawful processing.
  • Complaint to a supervisory authority (for example an EU DPA, Ecuador’s data-protection authority, or Argentina’s AAIP).

13. Children

The service is not directed to children under 13 (or the higher digital-consent age in your country). Do not submit children’s data. Contact us to delete any such data if discovered.

14. Security

We apply technical and organizational measures appropriate to the risk (encryption for cloud saves, access controls, transport security). No method of transmission or storage is perfectly secure—avoid entering unnecessary sensitive data (for example government ID numbers or financial account numbers) into resumes.

15. Contact and privacy requests

To exercise rights or ask privacy questions, email [email protected] with enough detail to locate your data (for example a resume/share ID). We respond within the timeframes required by applicable law.

[email protected]

We may update this Policy periodically. The effective date above will change when we do. Continued use after updates means you should review this page again. Material cookie changes will be reflected in the cookie banner.

This page provides product transparency and is not a substitute for formal legal advice. For binding compliance determinations (including Argentina AAIP database registrations where required), consult qualified counsel.

Privacy Policy - ResuLoom AI