Summarize.me

Privacy Policy

Last updated: February 19, 2026

1. Introduction

Résume-moi (hereinafter "the Service") is operated by Résume-moi SAS. We are committed to protecting the privacy of our users in accordance with the General Data Protection Regulation (GDPR). This policy describes the data we collect, the legal basis for each processing activity, and how we use it.

2. Data collected

We collect the following data: — Account data: name, email address, password (hashed). — Usage data: uploaded PDF documents, generated summaries, analysis history. — Technical data: IP address, browser type, pages visited (via Plausible Analytics, without cookies). — Payment data: managed exclusively by Stripe. We do not store any banking data. — Session cookie: "better-auth.session_token" (strictly necessary for the Service to function, duration: 7 days). — Advertising cookies (with consent): Google Ads uses cookies ("_gcl_au", "_gcl_aw") to measure advertising conversions. These cookies are only set after your explicit consent.

3. Purposes and legal bases

Each processing activity relies on a legal basis in accordance with Article 6 of the GDPR: — Account management, AI document processing, transactional emails (verification, password reset) → Performance of a contract (Art. 6(1)(b)). — Traffic analytics (Plausible, no cookies), abuse prevention → Legitimate interest (Art. 6(1)(f)). — Payment processing (Stripe) → Performance of a contract (Art. 6(1)(b)) and Legal obligation (Art. 6(1)(c)) for invoice retention. — Messages sent via the contact form (transmitted via Discord) → Legitimate interest (Art. 6(1)(f)). — Advertising conversion measurement (Google Ads) → Consent (Art. 6(1)(a)). Advertising cookies are only activated after your explicit agreement via the consent banner.

4. Document processing

PDF documents you upload are processed by our text extraction service, then analyzed by an artificial intelligence model via OpenRouter (which uses models hosted by OpenAI in the United States). Extracted text is retained in your history according to your plan (7 days for the free plan, unlimited for Essentiel). Original PDF files are automatically deleted after 1 day for the free plan. This transfer to the United States is governed by the EU-US Data Privacy Framework (DPF).

5. Data sharing

We never sell your data. We share your data only with the following processors: — OpenRouter / OpenAI (AI document processing) — United States — EU-US Data Privacy Framework. — Stripe (payment processing) — United States — EU-US Data Privacy Framework. — Resend (transactional email delivery) — United States — EU-US Data Privacy Framework. — Plausible Analytics (traffic analytics) — European Union — no transfer outside the EU. — Discord (receiving contact form messages) — United States — EU-US Data Privacy Framework. — Google Ads (advertising conversion measurement, with consent) — United States — EU-US Data Privacy Framework.

6. International transfers

Some of your data is transferred to the United States through our processors: — OpenRouter / OpenAI: extracted text from your documents for AI processing. — Stripe: payment data. — Resend: email address for transactional emails. — Discord: name, email and message sent via the contact form. These transfers are governed by the EU-US Data Privacy Framework (DPF), in accordance with the European Commission's adequacy decision of July 10, 2023.

7. Data retention

Your account data is retained as long as your account is active. Your analysis history (extracted text and summaries) is retained according to your plan: 7 days for the free plan, unlimited for Essentiel. Original PDF files are automatically deleted after 1 day (free plan) or retained according to your plan (Essentiel). When you delete your account, all your data is deleted, including stored files.

8. Cookies

The Service uses the following cookies: Strictly necessary cookie (exempt from consent): — Name: "better-auth.session_token" — Purpose: maintain your login session. — Duration: 7 days. — This cookie is exempt from consent in accordance with Article 5(3) of the ePrivacy Directive, as it is strictly necessary for the Service to function. Advertising cookies (subject to consent): — Names: "_gcl_au", "_gcl_aw" (Google Ads) — Purpose: measure advertising campaign conversions. — Duration: 90 days. — These cookies are only set after your explicit consent via the banner displayed on your first visit. You can withdraw your consent at any time via the "Manage cookies" link at the bottom of the page. Plausible Analytics is used for traffic statistics. Plausible does not set any cookies and does not collect any personal data.