Data Protection

Privacy Policy

Last updated: May 28, 2026

At thedigitalresume.in, we take your privacy seriously. This Privacy Policy explains how we collect, use, process, and protect your information when you use our website and AI portfolio generator.

1. Information We Collect

We collect only the narrowest set of data required to deliver our portfolio generation service:

• Account Authentication: When you sign in via Google, we receive your email, full name, and profile picture through **Supabase Auth**. This is used to track your single-generation quota.
• Resume Data: When you upload a resume PDF at `/generate`, our server securely extracts the text. The extraction is performed using the **Gemini API**. We do not save your raw PDF permanently on our main application servers; it is processed in memory or temporarily structured solely to build your portfolio prompt.
• Cookies & Preferences: We use essential, secure HTTP-only cookies to persist your active login session and `localStorage` to save your design/theme preferences.

2. How We Use Your Information

We use your processed data strictly to coordinate the portfolio generation workflow:

• To authenticate your session and check your remaining portfolio credit.
• To parse and convert your resume sections (experience, projects, skills, education) into clean, formatted JSON data.
• To programmatically create a private repository on your **GitHub** account and write the template code.
• To trigger and monitor public hosting deployments on **Vercel**.
• To email you payment receipts or instructions if you voluntarily submit UPI donation details.
• To showcase, market, and advertise the platform by displaying screenshots, mockups, or public URLs of generated portfolio websites in our gallery or marketing channels.

3. Third-Party Data Processing

We never sell, rent, or trade your personal data. To run the portfolio build process, we securely share necessary information with the following trusted third-party providers:

• Supabase: For identity authentication and generation quota storage.
• Google Gemini API: For secure resume text extraction and content parsing.
• OpenAI API: For AI portfolio code generation and structural layout adjustments.
• GitHub & Vercel: Standard Git storage and cloud deployment providers used to house and publish your final portfolio website.

4. Data Retention

We do not keep database records of your full resume text. Once the portfolio generation and GitHub commit succeed, the structured resume content resides entirely in your **own private GitHub repository** and your local browser session. The only data we store in our Supabase database is your Google account identifier, email, sign-in metadata, and your generation credit count.

5. Your Rights and Controls

Since your final portfolio resides in your own GitHub account and Vercel profile, you maintain complete ownership and control. You can delete the generated repository, take down your Vercel deployment, or log out to clear all temporary session cookies at any time.

6. Security Measures

We implement rigorous security practices to defend your data, including end-to-end SSL/HTTPS encryption for all network traffic, strict secure/HTTP-only configurations for login cookies, and automated scripts/code sanitization scanners during resume uploads.

7. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact Deepak Soni directly at thedigitalresume@gmail.com.