Privacy Policy
Effective 2026-06-09. Last updated 2026-06-09.
This Privacy Policy explains how Pika Resume, operated by UIX Labs, collects, uses, stores, and protects the personal information you share when you use the Pika Resume website, builder, AI tools, and related services. We have written this in plain English so that you can actually read it. Where local privacy law in your country gives you specific rights, the relevant sections below say so explicitly.
Quick summary
- You own your resume content. We process it only to deliver the service you asked for.
- We use a small set of trusted third parties (payments, analytics, AI providers) and we name them all below.
- We do not sell your personal data. We do not share resume content with advertisers.
- You can ask for a copy of your data, ask us to delete it, or close your account at any time.
- Reach our privacy team at support@pikaresume.com.
1. Who we are
Pika Resume is a resume-building product operated by UIX Labs. UIX Labs is the data controller for any personal information you provide while using Pika Resume. In this policy “we”, “us”, and “our” refer to UIX Labs and Pika Resume, and “you” refers to the user of the service.
You can reach us at support@pikaresume.com or through the Contact page.
2. What information we collect
We collect the following categories of personal information:
- Account information. Your name, email address, and the country you signed up from. If you sign in with Google or LinkedIn, we receive your name, email, and profile picture from the provider.
- Resume and CV content. Any text, sections, contact details, work history, education, skills, and uploaded documents you put into our resume builder, our PDF editor, or our JD-tailoring tool. This content belongs to you and we process it only to deliver the service.
- Payment information. When you buy a paid product we use Razorpay as our payment processor. Razorpay receives your card or UPI details; we receive only the transaction reference, status, amount, and the billing country. We never see or store your full card number or CVV.
- Usage and device information. Pages you visit, features you use, the device type, browser, approximate location (derived from IP address), and the referring URL. This is used for product analytics and abuse prevention.
- Cookies and similar technologies. Small files placed on your device to keep you signed in, remember your preferences, and measure how the service is used. See the cookies section below.
- Support correspondence. When you email us or use a contact form, we keep the conversation history so we can help you and improve the service.
We do not collect special categories of personal data such as health information, religious beliefs, or biometric data. If you choose to put information of this kind into a resume bullet point (for example, listing volunteer work at a religious organisation), it is processed only because you typed it; we do not ask for it and we do not infer profiles from it.
3. How we use your information
We use your information for the following purposes:
- To create and maintain your account and your resumes.
- To process your payments and provide access to paid features.
- To run AI-powered features like resume rewriting, JD tailoring, and the AI roast.
- To send transactional emails about your account, your downloads, and your billing.
- To measure product usage and improve features, fix bugs, and prioritise our roadmap.
- To detect, prevent, and respond to abuse, fraud, and policy violations.
- To send marketing communications, but only when you have opted in to receive them.
- To comply with legal obligations.
4. Our legal basis for processing
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar law, we rely on the following legal bases to process your personal data:
- Contractual necessity. Most of our processing is required to deliver the service you signed up for, including saving your resumes, generating AI suggestions, and processing your payments.
- Legitimate interests. Product analytics, abuse prevention, and improving the service are based on our legitimate interest in operating Pika Resume. We balance these interests against your privacy rights and you can object at any time.
- Consent. For optional cookies and for marketing emails we rely on your consent. You can withdraw consent at any time without affecting the lawfulness of past processing.
- Legal obligation. Where the law requires us to keep records (for example, tax records tied to a payment), we rely on legal obligation.
In India, processing is carried out under the Digital Personal Data Protection Act, 2023, primarily on the basis of consent and the legitimate uses set out in that Act. In California, processing of personal information is carried out as a “business” under the CCPA/CPRA. We do not sell or “share” personal information for cross-context behavioural advertising as those terms are defined under California law.
5. AI processing of your resume
Several Pika Resume features use third-party AI providers to generate text. When you use the AI builder, the JD-tailoring tool, the AI roast, or the AI bullet rewrite, the relevant resume content is sent to one of our AI processors so they can produce a response. The current AI processors are large language model providers including OpenAI and Anthropic. The data is processed only to generate the requested output and is not used by those providers to train their public models.
If you do not want any AI processing of your data, you can avoid using the AI features and build your resume manually. Non-AI features such as template selection, PDF export, and manual editing do not send your content to AI processors.
6. Third parties we share data with
We share your data with a small set of vendors that help us operate the service. These vendors process data only on our instructions and are bound by written data processing agreements.
- Razorpay - payment processing for users in India and supported countries.
- OpenAI and Anthropic - large language model inference for AI features.
- Amazon Web Services (AWS) - EC2 for hosting, S3 for resume and document storage.
- Cloudinary - image hosting for templates, profile photos, and resume preview thumbnails.
- Google Analytics 4 - aggregate product analytics. IP anonymisation is enabled.
- Mixpanel - product usage analytics and feature funnel measurement.
- Google Search Console - search performance measurement for our website.
- Resend - sending transactional emails (account, billing, downloads, and OTP).
We do not sell your personal data. We do not allow our advertising partners to use your resume content for ad targeting.
7. International data transfers
Pika Resume operates internationally and your data may be processed in countries other than the one you live in, including India, the United States, and the European Union. When we transfer personal data outside your country we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses, the UK's International Data Transfer Addendum, and equivalent provisions where available. For transfers from India we follow the rules and notifications issued under the Digital Personal Data Protection Act, 2023.
8. How long we keep your data
We keep your account and resume data for as long as your account is active. If you delete your account, we delete your resumes, generated AI outputs, and account profile within 30 days, except for records we are required to keep for legal or tax reasons (typically up to 6 years for payment records under Indian accounting law).
Anonymous analytics events are retained for up to 26 months in Google Analytics 4 and a similar period in Mixpanel. Logs used for security and abuse prevention are retained for up to 90 days.
Guest accounts that have not been claimed or used are deleted after 12 months of inactivity.
9. Your privacy rights
You always have the following rights with respect to your personal data:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data and your account.
- Withdraw consent where we are relying on consent.
- Object to processing based on our legitimate interests.
- Ask us to restrict processing while a complaint is being resolved.
- Ask for your data in a portable, machine-readable format.
To exercise any of these rights, email support@pikaresume.com. We will respond within 30 days. We may ask you to verify your identity before we act on a request.
European Economic Area and United Kingdom
You also have the right to lodge a complaint with your local data protection authority. In the EU you can find your authority through the European Data Protection Board website; in the UK you can complain to the Information Commissioner's Office.
India
Under the Digital Personal Data Protection Act, 2023, you have the rights to access, correction, erasure, and grievance redressal. You also have the right to nominate another person to exercise your rights in specified circumstances. If a grievance is not resolved through our privacy team you can escalate to the Data Protection Board of India.
California
Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), you have the right to know what personal information we collect, to access and delete that information, to correct inaccurate information, and to opt out of any sale or sharing of your personal information. As stated above, we do not sell or share personal information as those terms are defined by California law.
Other regions
If you are located in Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act), the United Arab Emirates, or another jurisdiction with a comprehensive privacy law, the same baseline rights above apply to you, and we will respond to your requests in accordance with the law that applies in your country.
11. Children's privacy
Pika Resume is intended for users aged 18 and over. If you are between 13 and 17 you may only use the service with the involvement and consent of a parent or legal guardian. We do not knowingly collect personal data from children under 13. If we learn that we have collected such data without verified parental consent, we will delete it.
12. How we protect your data
We use industry-standard security measures including encryption in transit (HTTPS on every page), encryption at rest for stored resume content and account data, restricted access controls inside our team, written data processing agreements with all sub-processors, and regular review of access logs. No service can guarantee perfect security, but we take this seriously and we will notify you and the relevant regulators in the event of a data breach that creates a risk to your rights.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make a material change we will update the “Last updated” date at the top of this page and, where the change is significant, we will notify you by email or through an in-product notice before the change takes effect.
14. How to contact us
For any privacy question, complaint, or request to exercise your rights, email support@pikaresume.com. You can also reach us through the Contact page.
Pika Resume is operated by UIX Labs. Postal correspondence can be sent through the contact form on the Contact page so we can route it to the right team.
