Privacy Policy

Last updated: 1 August 2026

ResumeRoo helps Australian Public Service applicants build a profile and tailor applications. This policy explains what we collect, why, and the choices you have, in plain language.

1. Who we are

ResumeRoo is operated by ResumeRoo, an Australian business. In this policy "we", "us" and "our" refer to ResumeRoo. For any privacy question, see Contact below.

2. What we collect

• Account information: your name, email address, and password (stored hashed).
• Profile content you provide: the resume you upload, and any work history, education and STAR examples you enter. This includes details about your employment, achievements, and selection-criterion responses.
• Jobs & kits: APS Jobs listings you save, and any candidate information kit you upload.
• Generated documents: tailored resumes, pitches and other applications ResumeRoo creates from your profile.
• Usage data: device, browser, and interaction data (e.g. features used) to keep the service running and improve it.

3. How we use it

We use your information to provide ResumeRoo, including building your structured profile, reading job criteria, and tailoring your resume, and to operate, secure, support and improve the service. We do not sell your personal information.

4. AI processing

AI processing for tailored applications is routed through OpenRouter, a third-party AI gateway. We share only the content needed for the task, under agreements that limit how providers use it. You should review every tailored application before you submit it. AI-generated content can be inaccurate, and you are responsible for checking that anything you send to a prospective employer is true and correct.

5. Sharing & disclosure

We share data only with service providers who help us run ResumeRoo, such as our hosting provider, OpenRouter for AI processing, and Stripe for payment processing, under agreements that limit how they use it. APS Jobs listings are public information. We may disclose information where required by law.

6. Retention & deletion

We keep your profile, generated documents and applications for as long as your account is active. You can export your data or delete your account at any time. The controls in Settings are the fastest way, and you can also request either through the contact page. Deletion removes your profile, STAR examples, generated documents and applications from our active systems.

7. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure.

8. Your rights

Under the Australian Privacy Principles you have the right to access and correct your personal information, and to ask us to delete or export it. You can exercise most of these directly in the app, or by contacting us. If you are unhappy with how we handle your information, you may complain to the Office of the Australian Information Commissioner (OAIC).

9. Cookies

We use essential cookies and local storage to keep you signed in and remember your preferences. Sign-in uses an httpOnly refresh cookie and a short-lived access token, so the refresh cookie cannot be read by scripts. We do not use advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted in the app or by email. The "last updated" date above reflects the current version.