Privacy Policy
Last updated: 16 May 2026
ResuBox takes the protection of your personal data seriously. This privacy policy explains what data we collect, why, and how we protect your privacy in line with GDPR.
1. Who we are
ResuBox is an online CV builder service that helps you create a professional CV easily. For questions about this privacy policy you can contact us at:
ResuBox
Email: info@resubox.com
2. What data do we collect?
We collect and process the following categories of personal data:
2.1 Data you enter into your CV
2.2 Data for magic link functionality
2.3 Billing data
2.4 Automatically collected data
3. What we use your data for
We process your data for the following purposes:
| Purpose | Legal basis (GDPR) |
|---|---|
| Generating your CV | Performance of contract |
| Saving your CV via magic link | Performance of contract / Consent |
| Sending invoices | Performance of contract / Legal obligation |
| Customer service and communication | Legitimate interest |
| Improving our service | Legitimate interest |
| Fraud prevention | Legitimate interest |
4. Where your data is stored
4.1 Local storage (browser)
By default your CV data is stored locally in your browser (localStorage). This data does not leave your device unless you request a magic link or download your CV. You can remove it by clearing your browser data.
4.2 Server storage
When you request a magic link or download your CV, your data is stored on secured servers:
5. How long we keep your data
| Data type | Retention period |
|---|---|
| CV data (local) | Until you clear your browser |
| CV data (server, via magic link) | 1 year after last use |
| Billing data | 7 years (statutory retention) |
| Email correspondence | 2 years |
| Analytics data | 26 months |
6. Do we share your data with third parties?
We only share your data with third parties when necessary:
6.1 Service providers (processors)
We have data processing agreements in place with each of these parties.
6.2 When legally required
We may share data when legally required, e.g. on request of authorities.
6.3 What we DO NOT do
- We never sell your data to third parties
- We do not use your data for third-party commercial purposes
- We do not share your CV content with employers or recruiters
8. Your rights
Under the GDPR you have the following rights:
Right of access
You can request what data we hold about you.
Right to rectification
You can have inaccurate data corrected.
Right to erasure
You can request deletion of your data.
Right to restrict processing
You can request that processing be restricted.
Right to data portability
You can receive your data in a structured format.
Right to object
You can object to processing.
Withdraw consent
You can withdraw your consent at any time.
To exercise your rights, contact us at info@resubox.com. We respond to requests within 30 days.
9. Security
We take appropriate technical and organisational measures to protect your data:
10. Minors
Our service is primarily intended for people aged 16 and over. We do not knowingly collect data from children under 16. If you are a parent or guardian and discover your child has provided data, please contact us.
11. International transfers
We aim to process your data within the European Economic Area (EEA). If data is processed outside the EEA, we ensure appropriate safeguards in line with the GDPR, such as Standard Contractual Clauses (SCCs).
12. Changes
We may update this privacy policy from time to time. Changes are published on this page. For significant changes we notify you by email (if available) or via a banner on the site.
13. Complaints
If you have a complaint about how we process your personal data, we would like to hear it. Contact us at info@resubox.com.
You also have the right to file a complaint with your national data protection authority. In the Netherlands:
Website: autoriteitpersoonsgegevens.nl
14. Contact
For questions about this privacy policy or the processing of your data:
ResuBox
Email: info@resubox.com
Questions about your privacy?
Feel free to get in touch if you have any questions about how we handle your data.
Contact us