1. Introduction

Tarmo.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume and cover letter generation service.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

Account Information: Email address, password (encrypted)
Resume Content: Personal and professional information you upload or input
Job Information: Job postings, company names, and job titles you provide
Generated Content: AI-generated resumes and cover letters
User Responses: Answers to our optimization questions

2.2 Usage Information

We automatically collect:

IP address and device information
Browser type and version
Pages visited and time spent on our Service
Generation history and credit usage
Error logs and performance data

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card information. We only receive transaction confirmations and payment status from Stripe.

3. How We Use Your Information

We use your information to:

Provide and improve our AI-powered resume generation service
Process your resume content through AI models for optimization
Manage your account and credit balance
Process payments and maintain transaction records
Provide customer support and respond to inquiries
Analyze usage patterns to improve our Service
Send important service updates and notifications
Comply with legal obligations and enforce our Terms

4. AI Processing and Third-Party Services

We use OpenAI's GPT-4o model to analyze and generate resume content. When you use our Service:

Your resume content is sent to OpenAI's API for processing
OpenAI processes this data according to their privacy policy and data usage policies
We implement appropriate safeguards to protect your data during transmission
Generated content is returned to you through our secure platform

For more information about OpenAI's data handling practices, please review their privacy policy at https://openai.com/privacy.

5. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information:

Data encryption in transit and at rest
Secure database hosting with PostgreSQL
Regular security updates and monitoring
Access controls and authentication systems
Secure payment processing through Stripe

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Account Information: Until you delete your account
Generated Documents: Stored permanently for your access
Temporary Data: Processed resumes expire after 2 hours if not used
Payment Records: Retained for 7 years for tax and legal compliance
Usage Logs: Retained for 12 months for security and analytics

7. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

Service Providers: OpenAI for AI processing, Stripe for payments
Legal Requirements: When required by law or to protect our rights
Business Transfers: In connection with a merger, acquisition, or sale of assets
Consent: When you explicitly consent to sharing

8. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request copies of your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information
Portability: Request transfer of your data to another service
Objection: Object to processing of your personal information
Restriction: Request restriction of processing

To exercise these rights, please contact us through our support channels.

9. Cookies and Tracking

We use cookies and similar technologies to:

Maintain your login session
Remember your preferences (dark mode, format selections)
Analyze usage patterns and improve our Service
Provide security features

You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information during international transfers.

11. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell your information)
Right to non-discrimination for exercising your privacy rights

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through our website support channels.

We will respond to your inquiries within 30 days of receipt.