Data Protection & Privacy

Privacy Policy

Your career documents contain your most sensitive professional history. Here is how Lumensic encrypts, stores, and protects your personal information and resume ASTs.

Last revised: August 31, 2026GDPR & CCPA Compliant Design

Encrypted Storage

Database contents are encrypted at rest using AES-256 encryption on MongoDB Atlas servers.

Zero Data Broker Selling

We will never monetize, sell, or rent your personal information or resume drafts to recruiters.

Opt-In AI Features

AI model calls run only when initiated by you, without training external models on your resumes.

Instant Account Erasure

Delete your account at any time for complete, irreversible removal of all associated documents.

1. Information We Collect

Account & Identity Information

When registering via Google OAuth or email sign-up, we collect your name, email address, and profile avatar URL. Password sign-ups store salted bcrypt hashes—we never store plaintext passwords.

Document Content & AST Tree

We store your resume AST nodes, LaTeX code snippets, section orderings, and custom formatting parameters so you can resume editing from any device.

Telemetry & Compilation Logs

We collect anonymized compilation statistics (e.g. PDF generation durations, LaTeX errors) to maintain compiler cluster health.

2. How We Use Your Information

We process your personal and document data exclusively to:

  • Authenticate your identity and maintain secure login sessions.
  • Compile high-precision LaTeX resumes and store project revisions.
  • Execute AI bullet refiners and ATS keyword optimization when explicitly clicked by you.
  • Process subscription renewals and manage billing limits via payment gateways.

3. Third-Party Service Processors

We work with trusted infrastructure providers who adhere to strict privacy safeguards:

MongoDB Atlas

Encrypted document database hosting.

OpenRouter & NVIDIA NIM

Stateless AI bullet generation (zero data retention policy).

Razorpay & Stripe

PCI-DSS compliant subscription payment processing.

Vercel Inc.

Edge network hosting and serverless functions.

4. Data Security Standards

All network transport between your browser and Lumensic is encrypted using TLS 1.3. Database storage layers utilize AES-256 block encryption. Compiler container environments run isolated, ephemeral sandboxes with non-root privileges.

5. Data Retention & Permanent Deletion

Your resumes and drafts are stored for as long as your account remains active. If you request account deletion, all personal data, document AST records, and uploaded assets are purged permanently from production databases within 30 days.

6. Your Rights & Data Export Controls

Under global data protection regulations (GDPR, CCPA), you have the right to:

Export Data: Download all your documents in raw JSON AST or TeX source format.
Manage Cookies: Adjust your tracking preferences anytime via Cookie Policy.

7. Privacy Officer Contact

To submit data access requests or privacy questions to our Data Protection Officer, reach out to: