Privacy Policy
Gennext Dimensions Inc. ("Company", "we", "us", or "our") operates the website and web application at www.gennextresume.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Information We Collect
We collect information in the following categories:
1.1 Information You Provide Directly
Account Information:
Email address
Password (encrypted)
Name (if provided)
Professional specialty (e.g., nursing specialty)
Years of experience
Any other information you choose to include in your profile
Resume and Professional Content:
Personal information (name, contact details, location)
Work history (job titles, employers, dates, descriptions)
Education history
Licenses and certifications
Skills and competencies
Professional summary and other text content
Any documents you upload (e.g., PDF resumes)
Payment Information:
Billing name and address
Payment card details are processed by our third-party payment processor (Stripe) and not stored on our servers
Communications:
Messages sent to our support team
Feedback, survey responses, or other voluntary communications
1.2 Information Collected Automatically
Usage Data:
IP address
Device type and operating system
Browser type and version
Pages visited, time spent, and features used
Referring and exit pages
Date and time of access
Cookies and Tracking Technologies:
We use cookies, web beacons, and similar technologies to collect usage data and improve the Service
See Section 7 (Cookies) for more details
Analytics Data:
We use third-party analytics services (e.g., Google Analytics, PostHog) to analyze usage patterns and improve our Service
1.3 Information from Third Parties
Authentication Providers:
If you sign in using a third-party service (e.g., Google), we may receive your name, email address, and profile information as permitted by that service
Payment Processors:
Payment confirmation and transaction data from Stripe or other payment providers
2. How We Use Your Information
We use the information we collect for the following purposes:
2.1 To Provide and Improve the Service
Create and manage your account
Process and store your resume content
Generate AI-assisted content (summaries, bullet points, suggestions)
Perform ATS (Applicant Tracking System) compatibility checks
Export resumes in PDF and DOCX formats
Provide customer support and respond to inquiries
Monitor, analyze, and improve the Service's performance, features, and user experience
2.2 To Communicate with You
Send transactional emails (e.g., account confirmations, password resets, purchase receipts)
Send service updates, security alerts, and administrative messages
Send marketing emails about new features, tips, and promotions (you may opt out at any time)
2.3 To Process Payments
Process transactions and manage subscriptions
Verify payment information
Detect and prevent fraud
2.4 For Legal and Security Purposes
Comply with legal obligations (e.g., responding to subpoenas, court orders)
Enforce our Terms and Conditions
Detect, prevent, and address fraud, abuse, security issues, or technical problems
Protect the rights, property, and safety of our users and the public
2.5 For Research and Development
Analyze aggregated, de-identified data to understand trends, improve AI models, and develop new features
We do not sell or share your personal information for these purposes
3. How We Share Your Information
We do not sell your personal information to third parties. We may share your information in the following limited circumstances:
3.1 Service Providers
We may share your information with trusted third-party service providers who perform services on our behalf, including:
Hosting providers (e.g., Supabase, Vercel) – to host and store data
Payment processors (e.g., Stripe) – to process payments
Analytics providers (e.g., Google Analytics, PostHog) – to analyze usage
Email service providers – to send transactional and marketing emails
AI and API providers (e.g., OpenAI) – to generate AI-assisted content
Document conversion services (e.g., Cloudmersive) – to process file uploads and exports
These providers are contractually obligated to use your information only for the purposes we specify and to protect it appropriately.
3.2 Legal Requirements
We may disclose your information if required to do so by law or in good faith belief that such action is necessary to:
Comply with legal obligations, court orders, or government requests
Enforce our Terms and Conditions or other agreements
Protect and defend our rights, property, or safety, or that of our users or the public
Detect, prevent, or address fraud, security, or technical issues
3.3 Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the successor entity. We will notify you via email or prominent notice on the Service if your information becomes subject to a different privacy policy.
3.4 With Your Consent
We may share your information with third parties if you provide explicit consent (e.g., sharing your resume with a third-party job board or recruiter).
3.5 Aggregated or De-identified Data
We may share aggregated or de-identified information that cannot reasonably be used to identify you (e.g., statistics about resume creation trends) for research, marketing, or other purposes.
4. Data Retention
4.1 Active Accounts
We retain your personal information for as long as your account is active or as necessary to provide the Service.
4.2 Account Deletion
If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required or permitted by law to retain it (e.g., for tax, legal, or fraud prevention purposes).
4.3 Backup and Archival
Deleted data may persist in backup systems for up to 90 days before being permanently purged.
4.4 Aggregated Data
Aggregated or de-identified data may be retained indefinitely for analytical and research purposes.
5. Data Security
We implement industry-standard technical and organizational measures to protect your information, including:
Encryption: Data is encrypted in transit using HTTPS/TLS and at rest where feasible
Access controls: Only authorized personnel have access to personal data, and access is logged
Regular security audits and testing
Secure authentication: Passwords are hashed using strong cryptographic algorithms
However, no system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
6. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
6.1 Access and Portability
You may request a copy of the personal information we hold about you
You may request that we export your data in a machine-readable format (data portability)
6.2 Correction and Update
You may update your account information at any time via your account settings
You may request correction of inaccurate or incomplete data
6.3 Deletion (Right to be Forgotten)
You may request deletion of your account and personal information
We will comply unless we are legally required to retain certain data
6.4 Restrict or Object to Processing
You may request that we restrict or stop processing your personal information in certain circumstances (e.g., if you believe it is inaccurate)
6.5 Withdraw Consent
Where processing is based on your consent, you may withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal)
6.6 Opt-Out of Marketing
You may opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your preferences in your account settings
You will still receive transactional emails necessary for the Service
6.7 Do Not Track
Some browsers have "Do Not Track" settings. Our Service does not currently respond to Do Not Track signals
6.8 How to Exercise Your Rights
To exercise any of these rights, please contact us at [
privacy@yourdomain.com
]. We will respond within the timeframe required by applicable law (typically 30 days).
7. Cookies and Tracking Technologies
7.1 What Are Cookies?
Cookies are small text files stored on your device by your browser. We use cookies and similar technologies to:
Remember your login session
Analyze usage patterns
Personalize your experience
Deliver targeted advertising (if applicable)
7.2 Types of Cookies We Use
Essential Cookies:
Required for the Service to function (e.g., authentication, security)
Cannot be disabled
Analytics Cookies:
Help us understand how users interact with the Service (e.g., Google Analytics, PostHog)
May be disabled via browser settings or opt-out tools
Marketing Cookies:
Used to deliver personalized ads and track ad performance (if applicable)
May be disabled via browser settings or opt-out tools
7.3 Managing Cookies
You can control cookies through your browser settings. Note that disabling certain cookies may limit functionality of the Service.
Opt-out tools:
Google Analytics:
https://tools.google.com/dlpage/gaoptout
PostHog: Can be disabled in account settings (if applicable)
8. International Data Transfers
8.1 Cross-Border Transfers
Our Service is hosted and operated globally. If you access the Service from outside [your primary jurisdiction, e.g., Canada], your information may be transferred to, stored, and processed in countries where our servers or service providers are located, including the United States and European Union.
8.2 Data Protection Standards
We ensure that such transfers comply with applicable data protection laws, including:
Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions (where applicable)
Other lawful transfer mechanisms
By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.
9. Children's Privacy
The Service is not intended for children under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children.
If we become aware that we have inadvertently collected information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at [
privacy@yourdomain.com
].
10. Third-Party Links and Services
The Service may contain links to third-party websites, services, or integrations that are not operated by us. We are not responsible for the privacy practices of these third parties.
We encourage you to review the privacy policies of any third-party services you use.
11. Region-Specific Privacy Rights
11.1 European Economic Area (EEA), United Kingdom, and Switzerland – GDPR
If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
Legal Basis for Processing:
Consent: When you provide explicit consent (e.g., marketing emails)
Contract: To perform our contract with you (e.g., providing the Service)
Legitimate Interests: To improve the Service, prevent fraud, and ensure security
Legal Obligation: To comply with applicable laws
Your Rights:
Access, correction, deletion, restriction, objection, and data portability (as described in Section 6)
Right to lodge a complaint with a supervisory authority in your country
Data Controller:
Gennext Dimensions Inc. is the data controller for your personal information
11.2 California – CCPA/CPRA
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Your Rights:
Right to Know: Request disclosure of categories and specific pieces of personal information we collect, use, and disclose
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information (we do not sell or share your information for targeted advertising)
Right to Correct: Request correction of inaccurate personal information
Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information (if applicable)
Non-Discrimination: We will not discriminate against you for exercising your rights
How to Exercise Rights:
Email us at [
privacy@yourdomain.com
]
We will verify your identity before processing requests
Categories of Personal Information Collected (past 12 months):
Identifiers (name, email, IP address)
Professional information (resume content, work history)
Payment information (processed by Stripe)
Usage data (device, browser, pages visited)
Categories of Sources:
Directly from you (account registration, resume creation)
Automatically (cookies, analytics)
Third parties (authentication providers, payment processors)
Business Purposes for Collection:
Providing the Service, processing payments, customer support, analytics, fraud prevention
Categories of Third Parties with Whom We Share:
Service providers (hosting, analytics, payment processing, AI providers)
11.3 Canada – PIPEDA
If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):
Your Rights:
Access your personal information
Request correction of inaccurate information
Withdraw consent (where processing is based on consent)
File a complaint with the Office of the Privacy Commissioner of Canada
Consent:
We obtain your consent for the collection, use, and disclosure of personal information, except where permitted or required by law
11.4 Other Jurisdictions
If you reside in another jurisdiction with specific privacy laws, you may have additional rights. Please contact us at [
privacy@yourdomain.com
] to learn more.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features.
Notification of Changes:
We will post the updated Privacy Policy on this page and update the "Last updated" date
For material changes, we may provide additional notice (e.g., email notification or prominent notice within the Service)
Your Continued Use:
Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy
If you do not agree with the changes, you must stop using the Service and may request deletion of your account
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Gennext Dimensions Inc.
Email: privacy@gennextresume.com
Registered Address: Gennext Dimensions Inc. 298 Briarmeadow Dr. Kitchener N2A 4L1 Ontario, Canada