Rizumai Home

Privacy Policy

Effective Date: June 25, 2026 Last Updated: June 25, 2026

1. Introduction

Welcome to Rizumai (the "Service"), operated by ZIX Labs LLC ("we," "our," or "us"). We respect your privacy and are committed to protecting the personal information you share with us while using our resume optimization services. This Privacy Policy explains what information we collect, how and why we use it, who we share it with, and the rights you have over it.

This policy applies to everyone who uses the Service. Although ZIX Labs LLC is based in the United States, our Service is accessible globally. If you access it from the European Economic Area (EEA), the United Kingdom, California, or another region with data protection laws, this policy is intended to meet those obligations, and additional region-specific rights are described in Sections 11 and 13.

For the purposes of the EU and UK General Data Protection Regulation (collectively, "GDPR"), ZIX Labs LLC is the data controller of your personal information.

2. Information We Collect

To provide our services effectively, we collect the following types of information:

  • Account Information: Your name, email address, and authentication details provided during registration.
  • User Content: The text of the job descriptions you input, your existing resume data, and the tailored resumes generated by our platform.
  • Usage Data: Standard server logs detailing how you interact with our Service. These logs include technical information such as your IP address, browser type, device information, and timestamps. We use this strictly for security, debugging, and maintaining the Service, not for advertising or behavioral tracking.

A note on sensitive information: Resumes sometimes contain information that data protection laws treat as sensitive (for example, details that reveal health, religion, ethnic origin, or political or trade union affiliation). We do not ask for this information and do not need it to provide the Service. We process whatever you choose to include in your resume content solely to deliver the optimization service you have requested. We recommend you remove any sensitive details you would prefer not to share. Where such processing requires your consent under applicable law, your submission of that content constitutes that consent, which you may withdraw at any time by deleting the content or your account.

3. How We Use Your Information

We use the information we collect strictly to operate and improve our platform, specifically to:

  • Provide our core resume optimization service.
  • Process your inputs to generate targeted, ATS-friendly documents.
  • Communicate with you regarding account support, service updates, or technical issues.
  • Maintain the security, integrity, and reliability of the Service.
  • Comply with legal obligations that apply to us.

4. Legal Bases for Processing (EEA and UK Users)

If you are in the EEA or the UK, we rely on the following legal bases under GDPR to process your personal information:

  • Performance of a contract — to create and maintain your account and to provide the core resume optimization service you have signed up for.
  • Legitimate interests — to secure, debug, and improve the Service, provided these interests are not overridden by your rights.
  • Consent — where you submit resume content that may contain sensitive information, and for any optional communications you opt into. You may withdraw consent at any time.
  • Legal obligation — where we must process information to comply with the law.

5. Third-Party Data Processors

To generate highly optimized resumes, the text you input (such as job descriptions and your work history) is securely transmitted to third-party Artificial Intelligence service providers via API. These providers act as our processors and handle your data only on our instructions.

  • These third-party processors only use this data to return the formatted text requested by our platform.
  • We do not sell your personal data.
  • We do not permit our AI partners to use your personal data to train their foundational models, and we use API arrangements configured so that submitted content is not retained for training.

The processors we use may include established third-party AI providers as well as self-hosted or local models operated by us. We may add, change, or replace these providers over time as our technology evolves. A current list of the third-party processors we use is available on request by contacting us at the address in Section 15.

6. International Data Transfers

Because we are based in the United States and may use processors located in the United States or elsewhere, your personal information may be transferred to, stored, and processed in countries other than the one in which you live. These countries may have data protection laws that differ from those in your jurisdiction.

Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) to ensure your information receives an adequate level of protection.

7. Data Retention

We retain your account information and User Content for as long as your account remains active, so that the Service is available to you. When you close your account, or when you request deletion, we permanently delete your personal data — including uploaded resumes, pasted job descriptions, and generated documents — from our active systems promptly thereafter.

We do not maintain separate long-term backup archives of your User Content; where any operational copies exist, they are overwritten in the ordinary course of running the Service rather than retained for any independent purpose. Standard server logs are retained only for the limited period needed for security and maintenance.

8. Cookies and Tracking

We prioritize your digital privacy. Our platform does not currently use non-essential tracking cookies, advertising pixels, or third-party analytics trackers. We only utilize the essential session data required to keep you securely logged into your account while using the platform.

9. Children's Privacy

Our Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from anyone under 16. If we become aware that a person under 16 has provided us with personal information, we will take immediate steps to delete that information from our servers. If you believe a child under 16 has provided us with personal information, please contact us at the address below.

10. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access or disclosure, including encryption of data in transit and at rest, access controls, and secure authentication. However, no method of digital transmission or server storage is 100% secure, and we cannot guarantee absolute data security.

11. Your Data Rights

You maintain control over your data. Depending on where you live, you have some or all of the following rights:

  • Access — obtain a copy of the personal information we hold about you.
  • Correction — update or correct inaccurate or incomplete information.
  • Deletion — request deletion of your account and all associated data.
  • Portability — receive your data in a structured, commonly used, machine-readable format.
  • Restriction — ask us to limit how we process your information in certain circumstances.
  • Objection — object to processing we carry out on the basis of legitimate interests.
  • Withdraw consent — where we rely on consent, withdraw it at any time without affecting prior processing.
  • Lodge a complaint — if you are in the EEA or UK, you may complain to your local data protection authority.

We will not discriminate against you for exercising any of these rights.

12. How to Exercise Your Rights

To exercise any of the rights above, contact us at [email protected]. We may need to verify your identity before acting on your request. We will respond within the timeframe required by applicable law — generally within 30 days for GDPR requests and 45 days for requests under California law, with the possibility of an extension where permitted.

13. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the CPRA:

  • The right to know what categories of personal information we collect, the sources, the purposes, and the categories of third parties we share it with.
  • The right to access and delete your personal information.
  • The right to correct inaccurate personal information.
  • The right to opt out of the sale or sharing of personal information.
  • The right to limit the use of sensitive personal information.
  • The right to non-discrimination for exercising these rights.

We do not sell or share your personal information, as those terms are defined under California law, and we do not use sensitive personal information for any purpose other than providing the Service you requested. The categories of personal information we collect are described in Section 2. To exercise your California rights, contact us using the details in Section 12 or Section 15.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will update the "Last Updated" date above and notify you by email or through a notice within the Service before the changes take effect. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

If you are in the EEA or UK and have concerns we have not resolved, you also have the right to contact your local data protection authority.