Privacy Policy & GDPR Compliance

1. Data Controller

Rezycle.me (“we”, “our”, or “us”) operates as the data controller under the General Data Protection Regulation (GDPR) (EU 2016/679) and international data privacy laws. We are committed to protecting your personal data and ensuring transparent processing.

2. Information We Collect

When you use Rezycle.me, we collect the following categories of information:

• Contact Information: Your email address, only if you choose to give it — to send you your scan results or to complete a purchase.
• Professional Data: Resume documents (PDF, TXT, DOCX) uploaded or pasted for AI outplacement analysis.
• Technical & Usage Data: Anonymized IP addresses, browser types, device information, and interaction logs.
• Payment Information: Processed securely via Stripe. We never store raw payment card details on our servers.

3. Purpose and Legal Basis for Processing

We process your data based on the following legal grounds under GDPR Article 6:

• Performance of Contract: To generate your AI outplacement audit, executive report, and week-by-week career roadmap.
• Legitimate Interest: To improve our service, enhance web security, and prevent fraud.
• Consent: To send you personalized follow-up sequences, promotional discounts, and outplacement resources via email.

4. Third-Party Sub-Processors

Your data is shared only with the following processors, strictly to deliver the service:

• OpenAI: Your resume text is sent to OpenAI's API to generate your AI analysis and outplacement report. API inputs are excluded from OpenAI's model training by default.
• Stripe: Processes payment card details for purchases. We never receive or store raw card numbers.
• Brevo: Sends transactional emails (report delivery, receipts) and manages our marketing contact list, if you opt in.
• Sentry: Receives technical error diagnostics (stack traces, the page/route where an error occurred) hosted on EU servers, so we can detect and fix bugs quickly. Request and response content — including resume text — is explicitly excluded from these reports.
• Google (Analytics & Ads): Receives anonymized IP-derived location, device/browser type, on-site behavior, and ad-click identifiers, used to measure traffic and ad performance. This only happens if you accept our cookie banner — no Google Analytics/Ads cookie is set, and no data is sent to Google, until you explicitly click Accept. You can decline or change your choice at any time; see “Cookies & Analytics” below.

4a. Cookies & Analytics

We use a consent banner (shown on your first visit) to control Google Analytics and Google Ads cookies. If you click “Reject” or take no action, these cookies are never set and no data is sent to Google. If you click “Accept”, we use them to understand site traffic and measure the performance of our ad campaigns. Strictly necessary cookies (e.g. keeping your free-scan session working, remembering your cookie choice) are not covered by the banner since they don't require consent under GDPR/ePrivacy. You can change your choice at any time by clearing your browser's local storage for this site.

5. Your GDPR Rights

Under EU and international privacy regulations, you hold the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct any inaccurate or incomplete information.
• Right to Erasure (“Right to be Forgotten”): Request the immediate deletion of your uploaded CV and account details.
• Right to Restrict or Object: Object to automated processing or email communications at any time.

To exercise any of these rights, please email us directly at support@rezycle.me.

6. Data Retention & Security

We do not store your uploaded resume file in a permanent database. Resume text is used transiently to generate your free audit. For paid orders, your resume text and generated report are temporarily retained within our payment processor's records for up to 90 days, solely so we can regenerate or resend your report if needed — after which they are automatically purged. You can request immediate deletion at any time via support@rezycle.me. All data transmissions are encrypted using SSL/TLS.