Privacy Policy

Last updated: March 17, 2026

Dune AI ("we", "us", "our") operates ResumeAI. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service. By using ResumeAI, you consent to the practices described in this policy.

1. Information We Collect

a. Information You Provide

  • Email Address: Collected during account registration for authentication via OTP verification.
  • Name and Phone Number: Optionally provided when you update your profile.
  • Resume Content: The text extracted from resumes you upload for analysis.
  • Job Descriptions: Text you paste for resume-to-job matching.
  • Payment Information: UPI transaction IDs submitted for Pro plan verification.

b. Information Collected Automatically

  • IP Address: Used for anonymous scan tracking and rate limiting.
  • Device Identifier: A randomly generated ID stored in your browser's local storage to track free scan usage.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Authenticate your identity via email OTP verification.
  • Process and analyze your resume against job descriptions using AI models.
  • Track free scan usage and enforce usage limits.
  • Process and verify Pro plan payments.
  • Communicate with you regarding your account, including sending verification codes.
  • Improve the Service and develop new features.
  • Prevent fraud, abuse, and unauthorized access.

3. Resume Data Processing

When you upload a resume, we extract the text content and send it to a third-party AI model (currently hosted on Groq) for analysis. We do not permanently store your resume files or extracted text after the analysis is complete. Resume content is processed in memory and discarded after generating your results.

We do not use your resume data to train AI models, and we do not share your resume content with any third parties other than the AI processing service necessary to deliver the analysis.

4. Data Storage and Security

Your account information (email, name, phone, scan counts, payment records) is stored securely in a cloud database hosted on Supabase. We implement industry-standard security measures including:

  • Encrypted data transmission (HTTPS/TLS).
  • Server-side authentication with secure token management.
  • Rate limiting to prevent brute-force attacks.
  • Input validation and sanitization to prevent injection attacks.
  • Security headers to protect against common web vulnerabilities.

While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

  • AI Processing: Resume text is sent to third-party AI services (Groq/Meta Llama) solely for analysis purposes.
  • Email Delivery: Your email address is used with SMTP services to send OTP verification codes.
  • Legal Requirements: We may disclose your information if required by law, regulation, or legal process.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

6. Data Retention

  • Account Data: Retained as long as your account is active. You may request account deletion at any time.
  • Resume Content: Not stored. Processed in real-time and discarded immediately after analysis.
  • OTP Codes: Automatically deleted after verification or expiration (5 minutes).
  • Payment Records: Retained for accounting and dispute resolution purposes as required by law.
  • Anonymous Scan Data: IP-based scan tracking data is retained to enforce free tier limits.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you.
  • Correct any inaccurate or incomplete information via your profile settings.
  • Delete your account and associated data by contacting us.
  • Withdraw consent for data processing at any time, though this may limit your ability to use the Service.
  • Object to certain types of data processing.

To exercise any of these rights, please contact us at work@duneai.in.

8. Cookies and Local Storage

ResumeAI does not use traditional browser cookies. We use browser local storage to store:

  • Your authentication token (for session management).
  • A device identifier (for anonymous scan tracking).
  • Basic profile information (for display purposes).

You can clear this data at any time through your browser settings. Clearing local storage will sign you out and reset your device identifier.

9. Third-Party Services

Our Service integrates with the following third-party providers:

  • Groq (AI Processing): Processes resume analysis requests. Subject to Groq's privacy policy.
  • Supabase (Database): Stores account and usage data. Subject to Supabase's privacy policy.
  • Google SMTP (Email): Delivers OTP verification emails. Subject to Google's privacy policy.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

11. International Data Transfers

Your data may be processed and stored in locations outside your country of residence, including servers in the United States (for AI processing and database hosting). By using the Service, you consent to such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: