Privacy Policy

Who we are

Gratisfolio is a resume and CV builder developed by Byrrus Apps. This policy explains what personal data we collect, how we use it, and what rights you have over it. By using Gratisfolio, you agree to the practices described here.

Scope

This policy applies to the Gratisfolio web application and any related services. It does not apply to third-party services linked from within the app — those are governed by their own privacy policies.

Account information

When you sign in with Google, we receive your name, email address, and profile photo from Google's OAuth service. We store your name and email in Firestore to identify your account. Your profile photo is never stored — we only display it via your Google account's URL.

Resume content

All resume data you enter — work experience, education, skills, personal details, and any other sections — is stored in Firestore, scoped strictly to your account. No other user or third party can access your resume content.

Subscription data

If you upgrade to Pro, Stripe processes your payment. We store your Stripe customer ID and subscription status in Firestore to gate Pro features. Full payment card details are never transmitted to or stored by Gratisfolio — they go directly to Stripe.

AI usage

When you use GratMini, the text you submit is sent to Google's Gemini API to generate a resume draft. This data is used solely to produce your output and is subject to Google's AI data usage policy. We do not retain your GratMini prompts or outputs beyond the session.

Usage data

We do not run analytics or tracking scripts. We do not use cookies beyond what Firebase requires for authentication session management.

To provide the service

Your account information and resume data are used exclusively to deliver the app's core functionality — saving your work, syncing it across devices, and generating exports.

To manage subscriptions

Your Stripe customer ID and subscription status are read to determine which features and limits apply to your account.

To communicate with you

Your email address may be used to send critical service notifications — for example, if your subscription has a payment issue. We do not send marketing emails.

What we never do

We do not sell your data, share it with advertisers, use it to train AI models, or disclose it to any third party except as described in this policy. Gratisfolio products are ad-free.

Firebase (Google)

We use Firebase Authentication for sign-in and Firestore for data storage. Both are Google Cloud services. Data is stored in the EU (europe-west2) region. Firebase's privacy policy applies: firebase.google.com/support/privacy.

Stripe

Stripe handles all payment processing. When you subscribe, you interact directly with Stripe's secure checkout. Stripe's privacy policy applies: stripe.com/privacy.

Google Gemini

GratMini uses the Gemini API for AI-powered resume generation. Content submitted is processed by Google's API infrastructure. Google's AI policy applies: ai.google.dev/terms.

How long we keep your data

Your account and resume data is kept for as long as your account is active. If you delete your account, all associated Firestore data is permanently deleted within 24 hours. Stripe subscription records are retained for the period required by financial regulations.

Deleting your account

You can permanently delete your account at any time from Settings → App Management → Delete Account. This is irreversible. All your resume data, saved preferences, and account record will be wiped.

Access & portability

You can export your resume as a PDF at any time directly from the app. If you need a copy of the raw data we hold about you, contact us at the address below.

Correction

You can update your resume content at any time within the app. If your account details are incorrect, contact us and we will correct them.

Erasure

You have the right to request deletion of your personal data. The easiest way is to use the Delete Account option in Settings. For partial deletion requests, contact us directly.

GDPR & UK GDPR

If you are in the UK or European Economic Area, you have additional rights under GDPR including the right to object to processing and the right to lodge a complaint with your local supervisory authority.

How we protect your data

All data in transit is encrypted via TLS. Firestore data is encrypted at rest by Google. Access to your Firestore documents is enforced by security rules that require a valid authenticated session matching your user ID — no other user can read or write your data.

Reporting a vulnerability

If you discover a security issue, please disclose it responsibly by emailing byrrusapps@gmail.com. We take security reports seriously and will respond promptly.

How we notify you

If we make material changes to this policy, we will update the 'Last updated' date at the top of this page. For significant changes, we will notify signed-in users via the app. Continued use after changes constitutes acceptance.

Get in touch

For any privacy-related questions, data requests, or concerns, email us at byrrusapps@gmail.com. We aim to respond within 5 business days.