Skip to content

Privacy Policy

Effective 21 September 2026

The short version

  • Your resume and the job descriptions you paste are used only to provide the service to you.
  • We do not sell your data. We do not show ads.
  • Your resume is not used to train AI models.
  • You can get a copy of your data, and you can delete it.

This policy explains how Magical Resume (“we”, “us”) handles personal data when you use this website and the Magical Resume service.

What we collect

Account details

You sign in with Google. Google gives us your name, your email address and your profile picture. We do not receive your Google password and we do not get access to your mail, contacts or files.

What you give us

The resumes you upload, the job descriptions you paste, the answers you give when the tool asks you a question, and the match reports and tailored versions made from them. A resume usually contains personal details such as your name, contact details, work history and education. Please do not put information about other people into the service unless you have the right to.

Usage events

We record events such as “resume uploaded”, “tailoring finished” or “file downloaded”, with the time and your account, so that we can count usage against your plan, fix problems and see which features are used. These events do not contain the text of your resume or of the job description.

Payments

Payments are handled by Stripe. Your card details go to Stripe and never reach our servers. We receive and keep what we need to give you access: a Stripe customer reference, which plan or pass you bought, and whether the payment succeeded.

Technical data

Like any website, our servers receive your IP address and basic browser information with each request. We use them to keep the service secure, to limit abuse and to diagnose errors.

Messages

If you write to us, we keep the conversation so that we can answer you.

What we use it for

  • To provide the service: reading your resume, producing match reports and tailored versions, saving them, and creating the files you download.
  • To manage your account, your plan and your payments.
  • To send you service emails, such as receipts and important notices about your account.
  • To keep the service secure and to prevent abuse.
  • To understand, from usage events and not from your resume text, what to fix and what to build next.

What we do not do

  • We do not sell or rent your personal data.
  • We do not use your resumes or job descriptions to train AI models, and we do not allow our AI provider to do so.
  • We do not share your resume with employers, recruiters or advertisers. It goes where you send it.

Who processes your data for us

We use the following companies to run the service. Each one receives only what it needs for its task.

  • Vercel: hosting of the website and application, and anonymous page-view statistics (Vercel Web Analytics, which sets no cookies and does not identify you).
  • MongoDB Atlas: the database where your account, resumes and tailored versions are stored.
  • Anthropic: AI processing. The text of your resume and of the job description is sent to Anthropic to read your resume and to produce match reports and tailored versions.
  • Stripe: payments.
  • Mailgun: sending email.
  • Google: sign-in.

These companies may process data in countries other than your own, including the United States. We may also disclose data if the law requires it.

Sharing features

Some features let you share something with another person. They show only what you choose to share, and nothing is shared unless you start it.

  • Feedback links let someone comment on your resume without an account. Contact details you choose to hide are removed on our server before the page is built. Reviewers see only their own comments and your replies. We never show a reviewer's email address to anyone. Links expire and can be turned off at any time.
  • Hosted resume pages show the copy of your resume you chose to publish, with the fields you chose to hide removed on our server. Edits you make later are not shown until you publish again. They are not listed by search engines unless you turn that on. Anyone with the link can open them.
  • When someone opens your hosted page we record the time, how long the page was visible, how far it was scrolled, whether the PDF was downloaded, the website that linked to it (domain only), the country from our hosting provider's header, and a device class (phone, desktop or tablet). We do not store IP addresses, browser fingerprints or user-agent strings, and we do not try to identify the reader. To count unique readers per day we store a keyed hash of the reader's hashed address using a random daily key that is deleted after two days, so it cannot be reversed or matched across days. Readers who send Do Not Track or Global Privacy Control are counted, but none of the above except the timing is stored. View records are deleted after 180 days, and at once if you delete the link.
  • Share cards contain only the text you confirmed after names, employers, schools and contact details were removed, or counts of your applications by stage. They are public, hold no name, and are deleted after one year.
  • Coach workspaces: a coach sees a document only after you share that document with them, and you can stop at any time. We do not give the coach your email address.

Free tools and trying before signing up

  • The free tools process the file or text you provide in memory and do not keep it. If you choose to share a result, we store only the score and fixed check ids for 30 days, never your text.
  • The machine-sounding-phrases tool may send up to three lines of the text you provide to our AI provider to suggest plainer wording.
  • If you try the product before signing in, the resume you drop and the job you paste are kept for 24 hours so your work can be moved into an account, then deleted. The uploaded file itself is never stored.

Job links and the browser extension

  • When you paste a link to a job posting, our server fetches that one public page. The posting text is saved for you, and the public posting is cached for 24 hours in a cache shared across users with no record of who asked. Logs record only the site's domain, never the full link. See how our job-page reader behaves.
  • The browser extension reads a job page only when you click it, and sends that page's text to your account. It never reads your browsing history, other tabs, or the site's sign-in, and it never fills in or submits an application for you. You can disconnect a browser from your account settings at any time.

How long we keep it

  • We keep your account and its contents for as long as the account exists. You can delete individual resumes and tailored versions at any time.
  • When you delete your account, your account and its contents are purged from our live systems within 7 days.
  • Backups are kept for up to 30 days and then overwritten, so deleted data can remain in a backup for that long.
  • Records of payments are kept for as long as tax and accounting law requires.

Cookies

We use a small number of cookies, all of them our own:

  • Session cookie: keeps you signed in. The service does not work without it.
  • Referral cookie: if you arrive through someone's referral link, we remember the referral code for up to 30 days so the referral can be credited.
  • Temporary work cookie: if you try a tool before signing in, a cookie links that work to your browser for 24 hours so it can be moved into your account when you sign in.
  • Source cookie: if you arrive from a shared page or a free tool, we remember that for up to 7 days so we can see which sharing features bring people here.
  • Reviewer cookie: if you comment on someone's resume through a feedback link, a cookie lets you see your own comments again. It holds no personal data.
  • Language cookie: if you use the language switch, we remember the language you chose (English or Arabic) for up to one year. If you are signed in, the choice is also saved on your account. It is not used for tracking.

We do not use advertising cookies.

Your rights

You can:

  • Access the personal data we hold about you.
  • Export your resumes and tailored versions.
  • Correct anything that is wrong. Your resumes are editable, and we will correct account details on request.
  • Delete your account and everything in it.

If you cannot find one of these options in your account, write to support@mg.www.magicalresume.com and we will do it for you. Depending on where you live, you may have further rights under your local law, including the right to complain to your data protection authority.

Children

The service is not meant for children under 16, and we do not knowingly collect their data.

Changes to this policy

If we change this policy we will change the effective date at the top of this page. If a change is significant, we will tell you by email before it takes effect.

Contact

Questions about privacy or about your data: support@mg.www.magicalresume.com. See also our Terms of Service.