Last updated: 15 November 2025
This Privacy Policy explains how we collect, use, disclose and protect your personal data when you use the website matchresume.ai and related services (together, the "Service"). The controller of your personal data is "Arcruit" SIA, a company registered in Latvia under registration number 40203656930 ("we", "us" or "our"). Our contact details are set out in Section 13 of this Privacy Policy.
By using the Service, you acknowledge that you have read this Privacy Policy. This Policy applies in addition to our Terms of Use. If you do not agree with this Policy, you should not use the Service.
When you use the Service, we may process different categories of personal data, depending on how you interact with us.
We collect account data, such as your name, email address, password or authentication data, and basic settings such as language or country where you choose to provide this information.
We also collect content that you upload or create, which includes the text and structure of your CV or résumé, cover letters and other documents, job descriptions that you paste or upload, and any notes or prompts that you provide to guide the AI suggestions. Because CVs and cover letters may contain details about your education, work history, skills and achievements, they may include sensitive or special-category data if you choose to include it, for example health information, union membership or other similar details. We do not request such information and recommend that you only include it where lawful and clearly relevant.
We collect technical and usage data when you access the Service. This may include information such as your IP address, device and browser type, operating system, approximate location at a country or city level, dates and times of access, pages viewed and actions taken within the Service. We may use cookies and similar technologies to collect some of this information, as described in Section 5.
If you make a purchase, we receive limited billing and transaction information from our payment providers. This may include the last few digits of your card number, the type of payment method, the transaction amount, currency, status and date, and any invoice details needed for accounting and tax purposes. We do not store your full payment card number or CVC; these are processed directly by the payment provider.
We also process communication data, which includes the content of messages and requests that you send to us, such as support queries, feedback and complaints, and information about your communication preferences, such as whether you wish to receive marketing emails.
If you choose to join our optional talent pool feature, we additionally process the information in your profile that is relevant for matching you with potential employers or recruitment partners, such as your CV, cover letters, profile data and the contact details you choose to make visible to business partners.
We process your personal data for several purposes and rely on different legal bases under the General Data Protection Regulation (GDPR).
We process your data in order to provide and operate the Service. This includes creating and managing your account, allowing you to build, edit and enhance your CV and cover letters, analysing your CV and/or cover letter against job descriptions, generating AI-based suggestions and bullet points, converting credits into tokens and providing access to features that you have paid for. In this case, the legal basis is the performance of a contract with you or taking steps at your request before entering into a contract, within the meaning of Article 6(1)(b) GDPR.
We process your data to maintain, secure and improve the Service and to develop new features. For example, we may analyse how users interact with different parts of the Service in order to understand which features are used, to detect issues or errors, and to make changes to our product. We may also use anonymised or aggregated forms of data derived from CVs, cover letters and usage patterns to improve our models and to better understand skills trends and job-market patterns. The legal basis for this is our legitimate interest in developing, improving and protecting our services and business, within the meaning of Article 6(1)(f) GDPR, balanced against your interests and rights.
We process your data in order to communicate with you and provide customer support. This includes responding to your questions, notifying you about important changes to the Service or our terms and policies, and communicating about account-related issues such as security or billing problems. Depending on the context, the legal basis is either performance of a contract under Article 6(1)(b) GDPR or our legitimate interest in managing our relationship with users under Article 6(1)(f) GDPR.
If you choose to receive marketing communications, we use your contact details to send you product updates, newsletters, feature announcements and similar information that we believe may be relevant to your use of matchresume.ai. For users in the EU and EEA, we rely on your consent for this, within the meaning of Article 6(1)(a) GDPR, where such consent is required. You can withdraw your consent or object to marketing at any time, as described in Section 9. In some cases we may rely on our legitimate interest in promoting our services as the legal basis, where permitted, always giving you an easy way to opt out.
If you decide to join our optional talent pool, we process your CV, cover letters, profile and contact data for the purpose of including you in a candidate database, matching you with business partners based on their criteria and making your details available to such partners so they can contact you about potential opportunities. The legal basis for this processing and for sharing your data with business partners for this specific purpose is your consent under Article 6(1)(a) GDPR, which you may withdraw at any time.
We also process your data as necessary to comply with our legal obligations, for example accounting and tax rules requiring us to retain certain transaction records, and to respond to lawful requests and orders from public authorities. The legal basis for such processing is Article 6(1)(c) GDPR.
Finally, we may process data where necessary to protect our rights, property and safety, to prevent fraud and misuse of the Service, and to establish, exercise or defend legal claims. This may include monitoring for suspicious activity, enforcing our Terms of Use and protecting our systems against attacks. The legal basis is our legitimate interest in protecting our business, our users and the public, within the meaning of Article 6(1)(f) GDPR.
The Service uses artificial intelligence technologies to analyse the content of your CV and cover letters and any job descriptions you provide, to generate suggestions on wording, structure and bullet points, and to propose improvements or missing elements. This form of processing can be considered profiling, in the sense that it analyses aspects of your professional profile and generates recommendations tailored to your inputs.
However, there is no automated decision-making that produces legal or similarly significant effects on you within the meaning of Article 22 GDPR. The suggestions generated by the Service are purely advisory and you are free to ignore, modify or accept them. We do not make hiring decisions, and using the Service does not by itself determine your chances in any recruitment process.
We work with third-party AI providers and infrastructure partners to deliver these features. We require such providers to protect your personal data and to act only on our instructions. We do not permit such providers to use your personal data for their own independent model training or marketing purposes unless this is clearly stated and a valid legal basis, such as your consent, applies.
We may use cookies and similar technologies on our website and within the Service. Cookies are small text files placed on your device that help us operate and understand the use of the Service. Some cookies are necessary for the Service to function properly, for example to keep you logged in or to remember certain settings. Other cookies may be used for analytics and performance purposes, such as understanding which pages are visited and how users navigate the Service.
Where required by law, we will ask for your consent before placing non-essential cookies, for example analytics cookies, and will provide you with a way to manage your preferences. More detailed information about the types of cookies we use and their purposes will be provided in a separate cookie notice or within the cookie banner on our website.
We may share your personal data with certain categories of recipients where necessary for the purposes described in this Policy.
We use service providers who act as processors on our behalf, for example providers of cloud hosting and storage, AI infrastructure and models, analytics tools, email and communication services, customer support platforms and payment processing services. These providers only process personal data on our instructions and under contracts that require them to protect your data and keep it secure.
If you choose to join our talent pool, we may share your CV, cover letters, profile information and contact details with selected business partners, such as employers, recruitment agencies and headhunters. These business partners act as independent controllers of your personal data once they receive your information; they are responsible for their own compliance with data protection laws and should inform you separately about how they process your data. You can withdraw your consent to being in the talent pool at any time and we will stop making your profile available to business partners for new searches, but this will not affect any processing already carried out by partners that have previously received your CV or contact details.
We may share your data with professional advisers, such as lawyers, auditors or accountants, where this is necessary to protect our legal and financial interests and to receive professional advice.
We may disclose personal data to public authorities, courts or law enforcement agencies where we are required to do so by law or where disclosure is necessary to protect our rights, the rights of users or the rights of others, or to prevent fraud or other wrongdoing.
We do not sell your personal data in a form that directly identifies you, such as your name, email address or full CV or cover letter, to third parties for their own independent marketing purposes. We may, however, use your data to create anonymised or aggregated statistics and insights about skills trends, job-market patterns and CV and cover letter structures and may share or commercially exploit such anonymised or aggregated information. Such information does not identify you personally.
Some of our service providers and business partners may be located outside the European Economic Area or may process personal data in countries outside the EEA. Where we transfer your personal data to a country that does not provide an adequate level of protection according to the European Commission, we will ensure that appropriate safeguards are in place.
These safeguards may include transferring data under the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms, together with additional technical and organisational measures where necessary. You can contact us at any time for more information about the safeguards that apply to specific transfers.
We keep personal data only for as long as is necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
In general, we keep your account-related data and your CV, cover letter and job-related data for as long as your account remains active. If you request closure of your account as described in our Terms of Use, we will deactivate your account and you will no longer be able to access the Service or any content stored in your account. After account closure, we will delete or anonymise most of the personal data associated with your account within a reasonable period.
We may need to retain certain information after account closure where we are required to do so by law or where we have a legitimate interest that is compatible with your rights and freedoms. For example, we may retain billing and transaction records for the period required by accounting and tax laws, and we may keep limited information necessary to document consents, handle disputes, prevent fraud or enforce our terms. Data in system backups may remain for a limited additional time before being overwritten.
If you withdraw your consent to the talent pool or close your account, we will stop making your profile available to business partners for new searches. This does not affect any processing already carried out by business partners who have previously received your CV, cover letters or contact details; they will continue to process your data in accordance with their own privacy notices.
If you wish to exercise your right to erasure under GDPR, you can request this at any time, as described in Section 9. We will assess such requests in light of our legal obligations and legitimate interests and will delete or anonymise data where the requirements for erasure are met.
If you are located in the EU, the EEA or another jurisdiction that grants similar rights, you have a number of rights in relation to your personal data.
You have the right to request access to the personal data we hold about you and to receive information about how we process it. You have the right to request correction of inaccurate or incomplete data concerning you. In certain circumstances, you have the right to request the erasure of your personal data, for example where the data is no longer necessary for the purpose for which it was collected or where you withdraw your consent and there is no other legal basis for processing.
You may have the right to request that we restrict the processing of your data, for example while we verify the accuracy of data or assess an objection. You also have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller, where the processing is based on consent or on a contract and is carried out by automated means.
Where we process your data on the basis of our legitimate interests, you have the right to object to such processing on grounds relating to your particular situation. We will then stop processing the data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
Where processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, you can contact us at support@matchresume.ai. We may need to ask you for information to verify your identity before responding to your request. We will respond within the timeframes set out in applicable data protection law.
You also have the right to lodge a complaint with your local data protection authority if you believe that our processing of your personal data infringes data protection laws. In Latvia, the supervisory authority is the Data State Inspectorate (Datu valsts inspekcija). We would, however, appreciate the chance to address your concerns directly before you contact the authority, so we encourage you to contact us first.
The Service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take appropriate steps to delete such data and, if applicable, to close the related account. If you believe that a child has provided us with personal data, you should contact us using the details in Section 13.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These measures may include encryption of data in transit, access controls, regular backups, logging and monitoring, and restrictions on who can access personal data within our organisation.
However, no system can be completely secure. You also play an important role in protecting your data by keeping your account credentials confidential, using a strong password and notifying us promptly if you suspect unauthorised access to your account.
We may update this Privacy Policy from time to time, for example to reflect changes in the Service, changes in the law or guidance from supervisory authorities. When we make material changes, we will take reasonable steps to notify you, for example by email or via the Service. The date at the top of this Policy shows when it was last updated.
Your continued use of the Service after an updated version of this Privacy Policy becomes effective will signify that you have read and understood the changes. If you do not agree with the updated Policy, you should stop using the Service and may request closure of your account.
If you have any questions or requests relating to this Privacy Policy or our processing of your personal data, including requests to exercise your rights, you can contact us at:
Arcruit SIA
Registered office: Rīga, Gaiļezera iela 15–6, LV-1079, Latvia
Email: support@matchresume.ai