Your data is yours.
We just help you get hired.
MakeResume is operated by Vimatech Ltd (Company No. 17001986), registered with the UK Information Commissioner's Office. Here's exactly how we protect your data.
ICO Registered
We are registered with the UK Information Commissioner's Office, the authority that upholds data rights.
Registration: ZC155985
A Legal Basis for Each Use
We process your data under the UK GDPR and the Data Protection Act 2018, and under the EU GDPR if you live in the European Union. Our privacy policy states the legal basis for each use.
Set out in the privacy policy
Your Data, Your Control
Access, export or delete your personal data from your account settings. Once you delete your account, your data is erased within 30 days, and backup copies within 90 days.
Erasure within 30 days, backups within 90
Never Sold
Your resume content and personal data are never sold, used for advertising, or passed to recruiters. They are shared only with the processors listed below, some of which operate outside the UK.
Zero data broker relationships
Encrypted at Rest & in Transit
All traffic is served over HTTPS. The database and your stored documents are encrypted at rest by AWS with AES-256. Passwords are hashed with bcrypt.
Managed AWS infrastructure
Minimal Data Collection
We only collect what's strictly necessary to provide the service. No advertising trackers, no fingerprinting, and audience measurement only if you consent to it.
Data minimisation by design
How we handle your data
Security is built into every layer of our infrastructure.
Encrypted at rest and in transit
Database and document storage encrypted at rest with AES-256. HTTPS for all traffic.
UK infrastructure
The application, its database and your documents are hosted by AWS in London (eu-west-2). Some processors listed below operate outside the UK.
No credit card data stored
Paddle is our Merchant of Record, so we never see or store your payment details.
Error monitoring in the EU
Server errors are reported to Sentry in its EU data region, with automatic collection of IP addresses and user identifiers switched off.
Third-party processors
The providers that process personal data on our behalf. Our privacy policy explains what each one receives and how transfers outside the UK are covered.
| Provider | Purpose | Location |
|---|---|---|
| Paddle | Payments, invoicing and tax (Merchant of Record) | See Paddle's privacy notice |
| Amazon Web Services | Application hosting, database and document storage | UK (London, eu-west-2) |
| Cloudflare | Delivery and protection of makeresume.io and app.makeresume.io | Global network, US company |
| Sign in with Google (optional) | US | |
| Google Analytics, only with your consent | US | |
| reCAPTCHA on the contact form | US | |
| OpenAI | AI features: resume import, analysis, writing and translation | US |
| Resend | Account and service emails | EU sending region (Ireland), US company |
| Sentry | Error monitoring of our servers | EU data region (Germany), US company |
You're in control
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data we hold about you
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a portable format
- Restrict processing: Limit how we use your data
- Object: Object to processing based on legitimate interests
- Withdraw consent: Withdraw consent at any time where consent is the legal basis
Exercise your rights
Contact us via our contact form. We respond within one month, which may be extended by two further months for a complex request, in which case we tell you.
Have questions?
Read our full privacy policy or get in touch with our team.