Privacy Policy

Last Updated: July 26, 2025

Welcome to Pastify.ai ("we," "our," or "us"). We are deeply committed to protecting your privacy and handling your data with transparency and care. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your information when you access our website and use our AI-powered services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms herein, please do not use the Services.

1. Information We Collect and Why

We collect various types of information to provide and improve our Services for you. The legal bases for our data processing are primarily the performance of our contract with you, our legitimate business interests, and compliance with legal obligations.

1.1. Information You Provide to Us

  • Account Data: When you register for an account, we collect personally identifiable information such as your name and email address. We use this to create and manage your account, communicate with you, and secure your access to the Services.
  • Resume Content: To use our core AI features, you provide detailed professional information, including your employment history, job titles, responsibilities, skills, and educational background ("Resume Content"). We use this data exclusively to power the AI generation engine and deliver the personalized content you request.
  • Communications: If you contact us for support or feedback, we collect the information you provide in your communications to address your inquiries and improve our Services.

1.2. Information We Collect Automatically

  • Usage and Derivative Data: Our servers automatically log information when you access the Services. This includes your IP address, browser type, device information, operating system, access times, and the pages you have viewed. We use this data for security monitoring, analyzing trends, administering the site, and improving user experience.
  • Cookies and Similar Technologies: We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand how our Services are used. You can control cookie settings through your browser.

1.3. Information from Third Parties

  • Payment Data: To process your purchases of credits, we use a third-party payment processor, Creem.io. We do not store or have direct access to your full credit card information. We receive transaction confirmations and data necessary to manage your account status from Creem. You should review Creem's privacy policy for details on how they handle your data.

2. How We Use Your Information

Our use of your information is purposeful and is directly related to providing and improving the Services you have chosen to use:

  • Service Delivery: To create, maintain, and secure your account, and to provide the core AI-powered resume generation functionalities.
  • AI Model Processing: To send your Resume Content to our AI processing partners to generate the requested text. Crucially, your personal data is not used to train their publicly available models.
  • Transaction Processing: To manage your orders, process payments for credits, and handle billing inquiries.
  • Service Improvement: To monitor and analyze usage data to identify trends, fix issues, and enhance the performance and features of our Services. We may use fully anonymized and aggregated data for internal analytics.
  • Customer Support: To respond to your questions, comments, and requests effectively.
  • Security and Compliance: To prevent fraudulent activity, enforce our Terms of Service, and comply with legal obligations.

3. Disclosure of Your Information

We are not in the business of selling your personal information. We only share your data with trusted third parties who act as our service providers, under strict confidentiality agreements, for the purposes outlined below:

  • AI Service Providers: We share your Resume Content with our AI partners (such as OpenAI) via secure API calls to generate content. Our agreements with these partners prohibit them from using your data for their own purposes or for training their general models.
  • Third-Party Service Providers: We share information with vendors who perform services on our behalf, including payment processing (Creem), cloud hosting (e.g., AWS, Vercel), data analysis, and email delivery. They are authorized to use your information only as necessary to provide these services to us.
  • By Law or to Protect Rights: We may disclose your information if we believe it is necessary to respond to a legal process (like a subpoena or court order), to investigate potential violations of our policies, or to protect the rights, property, and safety of our company, our users, or others.
  • Business Transfers: In the event of a merger, sale of company assets, financing, or acquisition of our business, your information may be transferred as a business asset. We will provide notice before your Personal Information is transferred and becomes subject to a different Privacy Policy.

4. Data Security

We implement a range of administrative, technical, and physical security measures designed to protect your personal information. This includes using SSL/TLS encryption for data in transit and encryption for data at rest. While we take reasonable and robust steps to secure your data, please be aware that no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against all interception or misuse.

5. Data Retention and Your Rights

We retain your personal data only for as long as your account is active or as needed to provide you with our Services and to comply with our legal obligations. You have control over your data and possess the following rights:

  • Right to Access: You can request a copy of the personal information we hold about you.
  • Right to Rectification: You can modify or update your account information at any time through your account settings.
  • Right to Erasure (Deletion): You can request the deletion of your account and associated personal data by contacting us. We will process your request in accordance with applicable data protection laws.
  • Right to Data Portability: You have the right to request your data in a machine-readable format.

To exercise these rights, please log into your account or contact us directly at the email provided below.

6. International Data Transfers

Our Services are global, and your information may be transferred to and processed in countries other than your own. We ensure that any such transfers comply with applicable data protection laws by using appropriate safeguards, such as Standard Contractual Clauses, to protect your data.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

8. Contact Us

If you have questions, comments, or concerns about this Privacy Policy or our data practices, please contact us at: [email protected].