Privacy Policy

1. Who we are

Rezlo ("Rezlo," "we," "us," or "our") is an AI-powered resume building and job application platform. This Privacy Policy explains what information we collect when you use Rezlo, how we use it, who we share it with, and the choices you have.

2. Information we collect

Account information

We use Clerk as our authentication provider. When you sign up, Clerk collects and stores your name, email address, and authentication credentials (including any OAuth identity, such as Google, if you sign in that way). We receive your user ID, name, and email from Clerk to associate activity with your account.

Resume and application content

We store the resume content you create or upload — including work history, education, skills, contact details, and any other information you choose to include — along with job descriptions you paste in for AI tailoring or ATS scoring, and any cover letters or outreach messages you generate or save.

Gmail access (outreach feature)

If you connect your Google account to use Rezlo's outreach feature, we request only the gmail.send Gmail OAuth scope. This scope lets Rezlo send an email from your Gmail account only when you explicitly click Send on a message you reviewed in the product. We request no broader Gmail scope, and this scope does not grant Rezlo any ability to do so.

Specifically, Rezlo does not:

• Read your Gmail inbox or any of your messages
• Modify or edit any Gmail message
• Delete any Gmail message
• Access your Gmail history
• Access, read, or create Gmail drafts

Your Gmail OAuth tokens are stored encrypted at rest on our servers and are never exposed to your browser, the Rezlo Chrome Extension, or any third party. We never log the contents of these tokens. You can revoke this access at any time from your Google Account permissions (myaccount.google.com/permissions) or by disconnecting Gmail from Rezlo's account settings — either action deletes the stored tokens.

Payment information

Subscription payments are processed by Razorpay. We do not store your full card or payment credentials on our servers — Razorpay handles that directly and shares with us only what's needed to manage your subscription status (such as plan tier, payment status, and transaction identifiers).

Usage analytics

We collect basic usage data — such as which features you use, resume creation and edit events, and general application activity — to understand how Rezlo is used and to improve it. We do not sell this data.

3. How we use your information

• To provide the core product: building, storing, and exporting your resumes
• To power AI features — resume tailoring, ATS scoring, and cover letter or outreach message generation — which involves sending relevant resume and job description text to our AI providers (see Section 4)
• To send outreach emails you compose and explicitly choose to send, via your connected Gmail account
• To process subscription payments and manage your plan
• To maintain account security, prevent abuse, and enforce our Terms of Service
• To understand feature usage and improve the product

4. Third parties we work with

We share data with the following third-party service providers, only as needed to operate Rezlo:

• Clerk — authentication and account management (name, email, credentials)
• Google (Gmail API, Google OAuth) — sign-in and, if you opt in, sending outreach emails on your behalf
• Google AI (Gemini) and other AI providers — processing resume and job description text to generate AI-tailored content, scores, and suggestions
• Razorpay — payment processing for paid subscriptions

Each of these providers processes data under their own privacy policy and terms. We only send them the data necessary for the specific function they perform for Rezlo, and we do not permit them to use your data for purposes unrelated to providing their service to us.

We do not sell your personal data to third parties, and we do not share your resume content with other users or with employers directly — any sharing of resume content with a third party (like an employer via an outreach email) happens only when you take that action yourself.

5. Data retention

We retain your account and resume data for as long as your account remains active. If you delete your account, we delete your resumes, generated content, and connected OAuth tokens within a reasonable period, except where we're required to retain limited records (such as payment records) for legal, tax, or accounting purposes.

6. Your rights

You can, at any time:

• Access and export the resume and account data associated with your account
• Correct inaccurate account information
• Revoke Gmail/Google OAuth access from your Google Account settings or from within Rezlo
• Delete your account and associated data from your account settings, or by contacting us

If you are located in a jurisdiction that grants additional data rights (such as the EU/UK GDPR or California's CCPA), you may have further rights over your data; contact us using the details below and we will respond to verified requests.

7. Data security

We use industry-standard measures to protect your data in transit and at rest, including encrypted connections (HTTPS/TLS) and access controls on our databases and infrastructure. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable steps appropriate to the sensitivity of the data we hold.

8. Children's privacy

Rezlo is not directed at children under 16, and we do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy as Rezlo's features change. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.

10. Contact us

For privacy questions, data access, or deletion requests, contact us at support@tryrezlo.com.