Legal Center
Privacy Policy
Last updated September 18, 2026 · 2026-09-18
This Policy explains how NOVALAYER LLC, EIN 35-2942710, with its registered address at 407 Lincoln Rd Ste 708, Miami Beach, Florida 33139-3024, United States (“SharpenResume,” “NOVALAYER,” “we,” “us,” or “our”), collects, uses, discloses, retains, and deletes personal information when you use SharpenResume from any of the countries or territories where it is available.
1. Scope
This Policy applies to https://sharpenresume.com, the resume upload and optimization flow, checkout, Membership, the account, Dashboard, and support. It does not apply to third-party sites or services that apply their own policies.
2. Personal information we collect
We may collect the following categories:
Do not request or include unnecessary information such as Social Security numbers, tax identifiers, bank details, full card numbers, passwords, medical information, or other highly sensitive data.
| Category | Examples |
|---|---|
| Identifiers | Name, email address, account, session, order, customer and subscription identifiers, IP address, and language. |
| Professional and educational data | Experience, employers, roles, education, skills, licenses, achievements, keywords, and other resume content. |
| Content and communications | Uploaded PDF, Word, text, or images, instructions, optimized resumes, support messages, and requests. |
| Commercial information | Purchases, Membership, renewals, cancellations, refunds, receipts, and payment status. |
| Limited payment data | Transaction identifiers and status provided by Stripe. Stripe receives full payment credentials; SharpenResume does not. |
| Internet or device activity | Browser, device, operating system, IP address, referring page, operational events, logs, cookies, and local storage. |
| Inferences and Results | Diagnoses, indicative ATS scores produced by automated analysis, recommendations, analyses, optimized versions, and history. |
| Authentication data | Authorized Google OAuth claims such as a stable identifier, verified email, name, image, and language. |
| Country and preferences | Selected country or professional market, language, currency, and cookie preferences. |
3. Sources of information
We collect information directly from you; automatically from your browser and interaction with the service; from Google when you choose Google sign-in; from Stripe for payments and subscriptions; and from providers that help us operate, protect, and deliver the service.
4. Purposes of processing
We use information to:
- Analyze, optimize, and deliver resumes and other Results.
- Authenticate Users and maintain sessions, accounts, preferences, and history.
- Process purchases, trials, renewals, cancellations, and refunds.
- Send receipts and operational communications.
- Provide support and respond to privacy requests.
- Detect fraud, abuse, failures, and security threats.
- Maintain, diagnose, measure, and improve service reliability.
- Comply with legal, tax, accounting, and regulatory obligations.
- Establish, exercise, or defend legal claims.
5. Legal bases for EEA, United Kingdom, and equivalent territories
When the European Union General Data Protection Regulation, United Kingdom GDPR, or equivalent legislation applies, we process information on the following legal bases:
We do not request special categories of data. If you voluntarily include health information, racial or ethnic origin, religion, trade-union membership, sexual orientation, or other sensitive data in a resume, we will process it only to provide the service requested and under any additional legal basis that applies, including your explicit consent where necessary. We recommend removing sensitive data that is not essential.
- Performance of a contract: to analyze and deliver resumes and manage the account, trial, Membership, payments, cancellation, and support.
- Legal obligation: for tax, accounting, regulatory, consumer-protection, and authority-response obligations.
- Legitimate interests: for security, fraud prevention, diagnostics, defense of claims, and limited improvement of reliability, provided your rights do not override those interests.
- Consent: for optional cookies, commercial communications, and other processing where required by law. You may withdraw it at any time without affecting earlier processing.
6. Automated processing and artificial intelligence
Resume content and instructions may be processed using OpenAI for analysis and transformation and Google Gemini as an alternative or independent quality review. These systems may identify sections, assess clarity and readability, suggest keywords, generate indicative scores, and create optimized documents.
Results do not constitute hiring decisions, do not by themselves produce legal or similarly significant effects, and may be inaccurate. You must review them. SharpenResume does not intentionally use resumes to train its own models or authorize providers to use them for purposes incompatible with the contracted service.
7. Providers and disclosures
We may disclose personal information to contracted providers for business purposes.
We contractually require providers to process information only to provide their services, protect it, and comply with law.
- Cloudflare, for infrastructure, security, execution, and processing queues.
- Supabase, for database, authentication, and private storage.
- OpenAI and Google Gemini, for AI analysis and transformation.
- Stripe, for payments, Memberships, fraud prevention, and regulatory obligations.
- Resend, for transactional email and delivery logs.
- Google, for OAuth when the User chooses that method.
- Professional advisers, auditors, and authorities when necessary.
- Acquirers or successors in a merger, financing, reorganization, or sale, subject to applicable safeguards.
8. Sale, sharing, and targeted advertising
SharpenResume does not sell personal information for money and does not share personal information for cross-context behavioral advertising or targeted advertising. It also does not use User Content for marketing. If these practices change, we will update this Policy and provide required notices, consent, and opt-out mechanisms before they begin.
9. Retention
We retain information only for as long as needed for the purposes described:
We may keep minimal records longer when necessary to comply with law, prevent fraud, resolve disputes, or document consents and transactions. Providers may apply their own periods for legal and security obligations.
| Data | Indicative period |
|---|---|
| Resume uploads without a confirmed payment | Deleted automatically 24 hours after upload. |
| Paid resumes, extracted text, and Results | While they remain in the account or are needed to deliver the order. |
| Data deleted by the User | Up to 7 days in active systems and up to 30 days in technical backups. |
| Account and profile | While the account is active and up to 30 days after deletion, subject to legal exceptions. |
| Support, privacy, cancellation, and refund requests | Up to 3 years after the request is closed. |
| Transaction, consent, and billing records | Up to 7 years or the period required by applicable law. |
| Security and antifraud logs | Normally up to 24 months; longer if connected to an incident or claim. |
10. Security
We apply reasonable administrative, technical, and organizational measures, including access controls, encryption in transit, private storage, separation of duties, and incident monitoring. No system is completely secure. You are responsible for protecting access to your email and account.
11. Children’s privacy
SharpenResume is not directed to people under 18 and we do not intentionally collect personal information from minors. If we learn that a minor’s information was provided without appropriate legal authorization, we may delete it. Notify us at support@sharpenresume.com.
12. Privacy rights and choices
Depending on your country, state, or territory and the applicable law, you may have the right to: confirm whether we process your information; access it; correct it; delete it; obtain a portable copy; learn the categories of information, sources, purposes, and recipients; object to or request restriction; withdraw your consent; opt out of sale, sharing, targeted advertising, or certain profiling; limit the use of sensitive information; and receive no discriminatory treatment for exercising your rights.
We currently do not sell or share information for cross-context behavioral advertising, so there is no need to opt out of those practices. We will recognize universal opt-out signals such as Global Privacy Control when legally applicable to an active practice.
13. How to exercise your rights
Send your request to support@sharpenresume.com or through the Contact page. Describe the right you wish to exercise and the associated email address. We may request information reasonably necessary to verify identity and authority. You may designate an authorized agent where permitted by law; we may verify both their authorization and your identity.
We will respond within the applicable legal period. If we deny a request and the law where you reside recognizes a right to appeal, you may appeal by replying to our decision or emailing support@sharpenresume.com. Users in the EEA or United Kingdom may also complain to the data-protection authority where they reside, work, or where the alleged infringement occurred. We will not discriminate against you for exercising a privacy right.
14. Notice for California residents
During the preceding twelve months, we may have collected the categories described in section 2 and disclosed those categories to the providers listed in section 7 for business purposes. We do not sell or share personal information as those terms are defined under California law. We have no actual knowledge of selling or sharing information of people under 16.
Where applicable, California residents may request information about categories and specific pieces collected, correct inaccurate information, request deletion, and receive no discriminatory treatment. We do not use or disclose sensitive personal information to infer characteristics beyond purposes permitted by California law.
15. International transfers and location
NOVALAYER is established in the United States, and information may be processed in the United States and other countries where our providers operate. Those countries may apply rules different from those in your place of residence. When the EU GDPR, UK GDPR, or equivalent rules require it, we use recognized mechanisms such as adequacy decisions, the European Commission’s Standard Contractual Clauses, the UK Addendum, and appropriate supplementary measures.
16. International representation and contact
NOVALAYER acts as controller for SharpenResume. International inquiries and privacy requests may be sent to support@sharpenresume.com. Where a law requires the appointment and publication of a local representative, their details will be provided in this section or in the relevant regional notice.
17. External links
We are not responsible for the privacy practices of third-party sites. Review their policies before providing information.
18. Changes to this Policy
We may update this Policy to reflect legal, technical, or business changes. We will publish the update date and provide additional notices when required by law.
19. Contact
- Controller: NOVALAYER LLC
- EIN: 35-2942710
- Address: 407 Lincoln Rd Ste 708, Miami Beach, Florida 33139-3024, United States
- Privacy: support@sharpenresume.com
- Support: support@sharpenresume.com