1. Who this policy covers
This policy explains how Qalbinatore, the operator of OMG Resume, handles personal information when you use our website, editors, workspace and related services. Contact us at support@omgresume.com about privacy or your information.
This policy covers our processing. A social-login provider, payment seller, AI provider or third-party website may also process information under its own terms and privacy policy.
Scope of this notice
This notice applies to visitors exploring the OMG Resume website, people using a guest editor, registered users creating career documents and people contacting us about the service. Different information is involved in each situation. Reading a public example does not require the same career information as importing your own CV or asking AI to draft a letter.
Our Terms and Conditions explain the service relationship. This policy explains how information is handled, including records that support an account or an operation after you leave a page. Where privacy law uses the term “controller”, the operator determines the purposes and means of its own processing. An independent payment seller or social-login provider may act in its own capacity. Contact us if you need clarification about which organisation handles a particular record.
2. Information we process
- Account information: your email, profile details, sign-in information and account preferences.
- Career content: CVs, cover letters, portfolio content, contact details, employment, education, photographs and other information you enter or upload.
- AI and import content: messages, relevant document context, uploaded files, extracted information, suggestions and the changes you choose to apply.
- Service records: plan status, allowances, download or AI usage, support requests and payment-reference information.
- Technical and security information: IP address, browser or device information, session activity, errors and signals used to investigate misuse. Approximate location may be inferred when available.
Provide only information relevant to the feature you are using. You must have permission or another lawful basis before submitting someone else’s personal information.
Examples in the CV-building workflow
An experience entry can contain a job title, employer, dates, location and achievements. An education entry can include a school, qualification and result. A cover letter may add the intended employer, role and job description. You choose whether to include a photograph, personal links, referees or additional sections. These fields can contain information about other people as well as you.
Import and chat records may include the file name, source content, selected usage mode, messages, extracted facts and the associated document reference. Technical records can describe when a request occurred, whether it completed and how much of an allowance it used. A support request adds the information you choose to send. Do not include passport numbers, payment-card details, health information or other sensitive material unless it is genuinely necessary and you understand the relevant processing. The AI section explains when content is sent to an external model provider.
4. Why we use information
We process information to create and secure accounts; save and edit documents; import files; provide the AI features you request; generate exports; publish pages you choose to publish; manage access and billing; respond to support requests; investigate errors, fraud and abuse; and meet legal obligations.
Where data-protection law requires a legal basis, these purposes may rely on performing our agreement with you, legitimate interests such as securing and improving the service, legal obligations, or consent where required. You can contact us to ask about the basis relevant to a particular use.
What is necessary and what is optional
Creating an account requires information that lets us identify and authenticate it. Saving a CV requires storing the content you want to edit. Delivering an AI response requires processing the relevant request and context. If you choose not to provide information necessary for one of these operations, that operation may be unavailable, while public browsing or another available feature may still work.
Security, error investigation and legal compliance can require records beyond the content displayed in your document. We assess the purpose of the relevant processing rather than treating acceptance of the website terms as consent for every possible use. Optional processing that requires consent must have an appropriate choice, and withdrawing it does not retrospectively invalidate earlier lawful processing. Questions about a purpose or legal basis can be sent through Making a privacy request; you do not need to post private information in a public review to ask.
5. How different records are used
- Identity and access records: connect you to your account, verify relevant requests and help prevent unauthorised access.
- Documents and editor data: display, save, arrange and export the content you ask us to work with.
- AI conversations and source material: provide context for the requested task and support continuity and recovery of that task.
- Usage and entitlement records: apply the plan, offer, expiry or resource allowance associated with your account.
- Diagnostic and security records: investigate errors, suspicious requests, repeated misuse and service reliability.
- Support correspondence: understand your issue, respond and document how a request was handled.
A purpose described here does not mean every category is collected on every visit. Information depends on the feature used and the permissions, settings and transaction involved.
Usage, diagnostics and account restrictions
Request counts, token usage, failures, session activity and plan entitlements help apply the features and allowances shown in the product. They also help investigate problems such as repeated imports, unexpected charges or an interrupted AI task. An account’s current editor content, a source attachment and a record of an earlier operation can therefore have different purposes and lifetimes.
Abuse prevention can consider unusual volumes or repeated attempts to bypass a limit. An IP address may describe a shared connection rather than a single person, and approximate country information can be missing or inaccurate. If a restriction affects legitimate use, contact support with the account reference and relevant circumstances. We use these records for operating and protecting the service, not for deciding your suitability for a job. The role of user-provided qualifications and AI suggestions is explained in the AI terms.
6. AI features and uploaded documents
When you use AI assistance or AI-assisted document processing, relevant messages, document information and source files may be sent to the provider used for that feature. The provider needs this content to generate a response or interpret the document. Provider processing and retention depend on its terms and the configuration used for the service.
Source files and extracted information may be retained to support processing, chat continuity, recovery and security. If a feature displays an expiry for a source, that expiry relates to that source’s availability; it does not necessarily mean your saved document or chat is deleted at the same time.
You can edit documents directly without requesting AI suggestions. Review uploads and remove unnecessary sensitive information before using AI features.
Context, linked documents and source availability
A request to improve a summary may need that summary and relevant experience. Creating a cover letter from a selected CV can require facts from that CV and any job description or style reference you provide. Asking about a PDF or image can require sending the relevant source material. Selecting a provider or feature can therefore affect which organisation receives the content needed for the operation.
The saved document, conversation history, temporary source and processing checkpoint are distinct records. A source becoming unavailable does not mean all facts already saved into a CV have been removed. Conversely, a retained chat message or file name does not guarantee that the original source remains readable. Check any availability notice before relying on it for a later task. Provider terms can differ on retention and permitted use; contact us about the provider involved if you need that detail before submitting sensitive content. For deletion requests, identify the records concerned using the privacy contact process.
8. Content you publish
If you publish a portfolio or another supported public page, its published content can be viewed, copied, shared or indexed by others. Review the page and remove information you do not want to make public.
Unpublishing a page can stop access through our publishing service, but it may not remove copies already retained by visitors, search engines or external services.
Private editing and public sharing are different
A portfolio can include contact links, photographs, project history and other identifying details. Think about the audience before publishing. A person who can access a public URL may share it with others, and external search results may keep a title, snippet or cached copy after you change the page. A private editor view should not be confused with the publicly published version.
When you send a downloaded CV to an employer or upload it to another platform, that recipient handles its copy under its own arrangements. Deleting your OMG Resume document cannot recall those external copies. If personal information appears on a page operated by us without appropriate authority, report the URL and concern through the content-reporting process. If the content belongs to your own account, the privacy-request process explains how to identify it without unnecessarily republishing it in a complaint.
10. Retention and deletion
We keep information for as long as reasonably necessary for the purposes described here, including providing your account and saved documents, resolving disputes, maintaining security and meeting legal obligations. Different records can have different retention periods. Deleted information may remain in limited backups, legal records or security records where necessary.
Use available account controls or contact support@omgresume.com to request access, correction or deletion. We may need to verify the request and may retain information where law or a legitimate security purpose requires it. Cancelling a paid plan does not itself request account deletion.
Different records need different retention decisions
A saved account document is retained to support continuing editing, while a temporary source may have a shorter availability period. Usage and security records can be needed to resolve allowance questions or investigate abuse. Purchase references and related correspondence may need to remain for accounting, disputes or other legal obligations even after a document is deleted.
We assess retention by the purpose of the record, the account relationship, any displayed expiry and applicable obligations. A deletion request should state whether it concerns a particular file, a chat, a document or the whole account. Backups and restricted legal or security records may not disappear at the same moment as the visible product copy. Where information is no longer needed, the appropriate response is deletion or de-identification subject to those requirements. Contact us for information about a particular record; do not assume that cancelling renewal or clearing browser storage also requests server-side deletion.
11. Security and international processing
We use technical and organisational measures intended to protect personal information, including access restrictions and safeguards appropriate to the service. No online service or transmission method can be guaranteed completely secure.
Our operator is based in Bangladesh. Providers may process information in other countries. Where applicable law requires safeguards for an international transfer, those requirements apply to the relevant processing.
Your part in protecting an account
Use a secure device and protect the mailbox or social account that controls sign-in. Be careful with public links, downloaded files and shared computers. We may verify ownership before releasing account information, and a suspicious message asking for a password or full card number should not be treated as an authorised support request. Report a suspected compromise using the contact details in this notice.
Hosting and processing locations can depend on the provider used for a feature. An approximate visitor country does not establish where all records are stored. Where an international transfer requires a contractual mechanism or another safeguard, the applicable requirements govern that transfer. You can ask about the recipient or safeguards relevant to your information through the request process. We do not promise a specific country of storage, an independent security certification or absolute protection from every incident unless an express, applicable commitment says so.
12. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information; restrict or object to processing; or withdraw consent where processing relies on consent. These rights may have legal exceptions.
Contact support@omgresume.com to make a request. You can also raise a concern with the relevant data-protection authority where that right applies. Withdrawing consent does not change the lawfulness of processing that took place before withdrawal.
We may send essential account, security and service messages. If we offer marketing communications, those messages will include a way to unsubscribe where required.
Common requests and their effects
You can ask what information is held about your account, request a correction or seek deletion of specified records. Where applicable, you may also request a portable copy, object to a particular use or ask that processing be restricted while a concern is assessed. A request concerning a referee’s information must take account of that person’s rights and your authority to act for them.
Some rights have conditions and exceptions. For example, deletion may be limited by a legal retention duty, and an access response should not expose another person’s private information. Optional promotional choices are separate from essential security and transaction communications. To make a request, follow the verification and contact guidance; to stop future paid renewal, follow the cancellation guidance. These routes can be used independently, and asking a privacy question does not require cancelling an account or purchasing a plan.
13. Regional privacy protections
Where the relevant law applies, residents of the European Economic Area, the United Kingdom and other regions may have rights concerning access, correction, erasure, portability, objection and restriction. Consent can be withdrawn for processing that relies on it. You may also be entitled to complain to your local supervisory authority.
California and residents of other US states may have rights to know, access, correct or delete covered personal information and to opt out of specified forms of sale, sharing or targeted advertising where applicable. Contact us to exercise an applicable right or ask which processing is relevant. We will not deny a legally protected right merely because you raise a privacy concern.
These rights depend on the relevant law and processing. To ask how a regional protection applies to your information, contact us using the privacy-request guidance below.
Requests under the law that applies to you
When you contact us, you may explain the country or state relevant to your request and the right you wish to exercise. We assess the applicable requirements rather than assuming that every regional rule applies to every visitor. EEA and UK rights can include access, correction, erasure, portability, restriction and objection, depending on the processing and legal basis. Relevant US state protections may also include appeal or opt-out rights where their conditions are met.
If you ask to opt out of a form of sale, sharing or targeted advertising covered by applicable law, identify the request through our privacy contact. We will assess the processing concerned and any required response, including applicable rules about authorised agents or browser signals. You can seek clarification or raise a concern with the relevant authority where entitled to do so. Our service terms do not remove a right that cannot lawfully be waived.
14. Making a privacy request
Contact support@omgresume.com from the address associated with your account where possible. Describe the record or right involved: for example, a copy of saved account information, correction of an inaccurate detail or deletion of particular content. Do not send an account password or full payment-card number.
We may ask for proportionate verification to protect your information. An authorised representative may need to demonstrate permission to act for you. We will handle a valid request within the time required by the law that applies, explaining any permitted extension or exception.
Deletion and access rights can be limited by another person’s rights, a legal retention duty or a need to establish or defend a claim. Where an exception applies, we will explain it as required. You can still cancel a subscription independently through the payment seller.
Making your request clear and safe
Identify the account email, the record or feature concerned and the action you want us to consider. A document name, conversation reference or public URL can help locate the right material. We may request proportionate ownership verification before disclosing information or making an irreversible change. Please do not send an unrequested identity document, another person’s full CV or payment credentials as proof.
If you use an authorised representative, we may need evidence of their authority and, where appropriate, separate confirmation from you. If a request is incomplete, we can ask for clarification so it reaches the correct records. We will explain an applicable refusal, exception, extension or appeal route as required by law. If you disagree with the response, reply to the correspondence with the relevant reference. The contact section of our terms can help distinguish a privacy request from an editor or billing support issue.
15. Young users and other people’s information
The service is intended for career preparation, not for collecting information from children who cannot lawfully use it. A young person must have the capacity or permission required by the law that applies to them. If you believe a child’s information was provided without a lawful basis, contact us so we can investigate and take appropriate action.
A reference, colleague, client or employer named in a document has privacy rights too. Avoid submitting unnecessary details about other people, and obtain permission or another lawful basis where required. Do not include confidential workplace records merely to demonstrate an achievement.
Student CVs and information about others
A student example in the library is a writing resource and does not change the legal conditions for a young person’s use of an online service. Do not create an account for someone who cannot lawfully use it without the permission or supervision required for that person. A parent or guardian with a concern can contact us, identifying the issue without including unnecessary sensitive information in the first message.
Referees, colleagues and clients may be named in a career document even though they do not hold an OMG Resume account. Include only information that is relevant and that you have authority to provide. A reference’s private telephone number, a client’s confidential record or an employee’s health information should not be added merely because a template offers another text field. A person affected by such content can use the privacy-request process or report a public page using its URL.
16. Updates and contact
We will update the date on this page when this policy changes and provide additional notice for material changes where required.
Privacy contact: Qalbinatore, Bangladesh. Email: support@omgresume.com.
How to follow up
Use the same correspondence reference when following up on a privacy issue so that the request can be assessed consistently. Explain if the concern relates to a private draft, a saved account document, an AI source, a public portfolio or a payment record; these are separate processing contexts and may involve different recipients.
The date at the top identifies this version of the notice. Material changes will receive additional notice or consent where required by applicable law. Read this policy with the Cookie Policy, Terms and Conditions and Refund Policy. A change to explanatory wording does not itself authorise an incompatible new use of personal information.
3. Social login and information from other sources
When you choose a supported social-login provider, we receive the account identifiers and profile information that provider makes available for the permissions you authorise. This can include your name, email address and profile image. We use it to identify your account and provide the requested sign-in flow.
Using social login does not give us your provider password. Additional permissions, if a feature needs them, must be presented through the relevant authorisation process. You can manage the provider’s permissions in its account settings; revocation may affect your ability to sign in using that method.
Payment-status information and abuse-prevention signals may also come from providers involved in a transaction or in protecting the service. We do not treat an approximate location signal as proof of a person’s exact address.
Permission and account recovery
The information received depends on the provider and the permissions displayed during authorisation. Social sign-in is a way to authenticate; it is not general permission to read your email, access all cloud files or publish through your social account. Review an authorisation prompt before accepting it. We do not need your social provider’s password in an OMG Resume support message.
If you remove a provider’s authorisation or lose access to that account, sign-in may stop working until access is recovered through the appropriate process. Removing authorisation at the provider does not automatically delete documents already saved with us. For account information held by OMG Resume, use the request process. For the provider’s independent records, use its own privacy controls. Ownership checks help prevent a person who knows your public email or CV details from obtaining your private workspace.